6.0.1

In order to enroll SSO users to guest user account, you should enroll SSO users to accounts in guest
operating systems. The enrollment process will map a vSphere user to a particular account in the guest
through the use of SSO certificates. Subsequent guest management requests can then use a SSO SAML token
to log into the guest
You should configure VMs to accept X.509 certificates so that vSphere administrators in your data center can
use SAM tokens issued by single sign-on service to access guest OSs.
View Existing SSO User Mappings
You can view the existing guest user mappings for guest operating systems on the selected virtual machine.
You need to authenticate your credentials to view guest mappings.
Procedure
1 Select the virtual machine where you want to view the list of user mappings.
2 Click Manage > Settings > Guest User Mappings.
3 Specify your user name and password.
4 Click OK.
The existing in-guest user mappings are displayed.
Add SSO users to Guest Operating Systems
You can map a new SSO user to a guest user account by creating a new user map. Mapping can be
established for any type of SSO users, such as solution as well as regular users.
Prerequisites
Power on the virtual machine.
Procedure
1 In the View Guest User Mappings window, click Add new user mappings.
2 Select the SSO user from the list that you want to map.
3 Specify a guest OS user name.
4 Click OK.
The SSO user is mapped to a guest user account. A new guest user account is added to the list of Guest
User Mappings.
Remove SSO Users from Guest Operating Systems
You can remove an existing SSO account from guest user mappings.
Prerequisites
Power on your virtual machine.
Procedure
1 In the View Guest User Mappings window, select the SSO user from the list that you want to remove.
2 Click remove user mappings.
3 Click Yes to confirm.
The mapping between the selected SSO user account and guest OS account has been removed.
vSphere Virtual Machine Administration
156 VMware, Inc.