Administration

5 Enter the command to enable the authenticator to use True SSO mode.
vdmUtil --authAs admin-role-user --authDomain domain-name --authPassword admin-user-password
--truesso --authenticator --edit --name authenticator-fqdn --truessoMode {ENABLED|ALWAYS}
For --truessoMode, use ENABLED if you want True SSO to be used only if no password was supplied
when the user logged in to VMware Identity Manager. In this case if a password was used and cached,
the system will use the password. Set --truessoMode to ALWAYS if you want True SSO to be used even
if a password was supplied when the user logged in to VMware Identity Manager.
What to do next
In View Administrator, verify the health status of the True SSO conguration. For more information, see
“Using the System Health Dashboard to Troubleshoot Issues Related to True SSO,” on page 95.
To congure advanced options, use Windows advanced seings on the appropriate system. See “Advanced
Conguration Seings for True SSO,” on page 91.
Command-line Reference for Configuring True SSO
You can use the vdmutil command-line interface to congure and manage the True SSO feature.
Location of the Utility
By default, the path to the vdmutil command executable le is C:\Program Files\VMware\VMware
View\Server\tools\bin. To avoid entering the path on the command line, add the path to your PATH
environment variable.
Syntax and Authentication
Use the following form of the vdmutil command from a Windows command prompt.
vdmutil authentication options --truesso additional options and arguments
The additional options that you can use depend on the command option. This topic focuses on the options
for conguring True SSO (--truesso). Following is an example of a command for listing connectors that
have been congured for True SSO:
vdmUtil --authAs admin-role-user --authDomain domain-name --authPassword admin-user-password --
truesso --list --connector
The vdmutil command includes authentication options to specify the user name, domain, and password to
use for authentication.
Table 5‑1. vdmutil Command Authentication Options
Option Description
--authAs
Name of a View administrator user. Do not use domain\username or user principal name (UPN)
format.
--authDomain
Fully qualied domain name or Netbios name of the domain for the View administrator user
specied in the --authAs option.
--authPassword Password for the View administrator user specied in the --authAs option. Entering "*" instead of
a password causes the vdmutil command to prompt for the password and does not leave sensitive
passwords in the command history on the command line.
You must use the authentication options with all vdmutil command options except for --help and
--verbose.
View Administration
88 VMware, Inc.