Administration

n You can click to expand Other Components > SAML 2.0 Authenticators to see a list of the
SAML authenticators that have been created for delegating authentication to VMware Identity
Manager instances. You can click the authenticator name to examine the details and status.
Note In order for True SSO to be used, the global setting for SSO must be enabled. In Horizon
Administrator, select Configuration > Global Settings, and verify that Single sign-on (SSO) is set
to Enabled.
Table 5-8. Connection Server to Enrollment Server Connection Status
Status Text Description
Failed to fetch True SSO health
information.
The dashboard is unable to retrieve the health information from the Connection
Server instance.
The <FQDN> enrollment server
cannot be contacted by the True
SSO configuration service.
In a pod, one of the Connection Server instances is elected to send the
configuration information to all enrollment servers used by the pod. This
Connection Server instance will refresh the enrollment server configuration once
every minute. This message is displayed if the configuration task has failed to
updated the enrollment server. For additional information, see the table for
Enrollment Server Connectivity.
The <FQDN> enrollment server
cannot be contacted to manage
sessions on this connection
server.
The current Connection Server instance is unable to connect to the enrollment
server. This status is only displayed for the Connection Server instance that your
browser is pointing to. If there are multiple Connection Server instances in the
pod, you need to change your browser to point to the other Connection Server
instances in order to check their status. For additional information, see the table for
Enrollment Server Connectivity.
Table 5-9. Enrollment Server Connectivity
Status Text Description
This domain <Domain Name>
does not exist on the <FQDN>
enrollment server.
The True SSO connector has been configured to use this enrollment server for this
domain, but the enrollment server has not yet been configured to connect to this
domain. If the state remains for longer than one minute, you need to check the
state of the Connection Server currently responsible for refreshing the enrollment
configuration.
The <FQDN> enrollment server's
connection to the domain
<Domain Name> is still being
established.
The enrollment server has not been able to connect to a domain controller in this
domain. If this state remains for longer than a minute, you might have to verify that
name resolution from the enrollment server to the domain is correct, and that there
is network connectivity between the enrollment server and the domain.
The <FQDN> enrollment server's
connection to the domain
<Domain Name> is stopping or in
a problematic state.
The enrollment server has connected to a domain controller in the domain, but
it has not been able to read the PKI information from the domain controller. If
this happens, then there is likely a problem with the actual domain controller. This
issue can also happen if DNS is not configured correctly. Check the log file on the
enrollment server to see what domain controller the enrollment server is trying to
use, and verify that the domain controller is fully operational.
The <FQDN> enrollment server
has not yet read the enrollment
properties from a domain
controller.
This state is transitional, and is only displayed during startup of the enrollment
server, or when a new domain has been added to the environment. This state
usually lasts less than one minute. If this state lasts longer than a minute, either
the network is extremely slow, or there is an issue causing difficulties accessing the
domain controller.
Horizon 7 Administration
VMware, Inc. 122