Login against vCenter with Connect-viserver that is behind idenitybroker that has adfs

[Bylla]

Hi,

I can't figure out how to connect to a vCenter that has its authentication over VCF SSO to identity broker.

The identity broker has ADFS configured.

Login with webbrowser works fine and redirects and lets through with correct permissions.

I have disabled the MFA for test sake.

I am fine with also login with local sso, ex vsphere.local. 

But that fails with: "Connect-VIServer: Specified method is not supported."

Version VCF 9.0.2

-------------------------------------------

[bwuch]

When using Connect-VIServer and a [e-mail] account, have you tried using the -NotDefault parameter?  There is a KB article here: https://knowledge.broadcom.com/external/article/418702/connectviserver-cmdlet-cannot-be-execute.html which suggests that's a possible workaround for the `Specified method is not supported` error message.

As for connecting to a vSphere environment configured with an external identity provider, I have seen that work before.  There is a bit of setup required, outlined in this doc: https://techdocs.broadcom.com/us/en/vmware-cis/vcf/power-cli/latest/powercli/managing-vsphere-with-powercl/connecting-to-a-vcenter-server-system/connect-to-a-vcenter-server-system-configured-for-an-external-identity-provider.html.  

I have a blog post here: https://enterpriseadmins.org/blog/scripting/how-to-use-powercli-with-federated-vcenter-logins/ that walks through this federated login process, if you scroll to the end there is a gif that loops through the steps so you can see it in action.  In the example I'm using Keycloak as the external IDP, but I would expect the process to be similar for ADFS.

-------------------------------------------