NSX-T User Role Assignment

[Zenon Matuszyk]

Hi, I have VCF 5.1.1 and I want to integrate NSX-T with Workspace ONE Access. Using Aria Suite Lifecycle I started a Workspace ONE Access cluster, which means LoadBalancer on NSX etc. Now I want to integrate NSX and in the System/User Management/Authentication Providers/VMware Identity Manager tab I give the Workspace One Access VIP address in VMware IDentity Manager Appliacne, it does not show me groups and users. But if I give a specific Workspace ONE Access node everything works fine. Is it supposed to work like this or is something wrong? I would be grateful for your help

[NickF123]

I thought with VCF 5.x the advice is to move away from WOA for NSX auth (presumably as Broadcom don't want such a core product dependent upon an app that's now owned by a 3rd party)? When I upgraded from 4.5.1 to 5.1 I changed NSX auth to LDAP and pointed at our AD directly (which was all we were doing with WOA anyway). Previously (4.x) the design guidance was point NSX at a standalone WOA for auth which worked OK (although wasn't the most stable) but I never tried pointing it at a WOA cluster. However, I'd re-evaluate using WOA at all at this point.