5.1

3 Select the lease options for vApps and vApp templates.
Leases provide a level of control over an organization's storage and compute resources by specifying the
maximum amount of time that vApps can be running and that vApps and vApp templates can be stored.
You can also specify what happens to vApps and vApp templates when their storage lease expires.
4 Select the quotas for running and stored virtual machines.
Quotas determine how many virtual machines each user in the organization can store and power on in
the organization's virtual datacenters. The quotas you specify act as the default for all new users added
to the organization.
5 Select the limits for resource intensive operations.
Certain vCloud Director operations, for example copy and move, are more resource intensive than others.
Limits prevent resource intensive operations from affecting all the users in an organization and also
provide a defense against denial-of-service attacks.
6 Select the number of simultaneous VMware Remote Console connections for each virtual machine.
You may want to limit the number of simultaneous connections for performance or security reasons.
NOTE This setting does not affect Virtual Network Computing (VNC) or Remote Desktop Protocol (RDP)
connections.
7 (Optional) Select the Account lockout enabled check box, select the number of invalid logins to accept
before locking a user account, and select the lockout interval.
8 Click Apply.
Set Default Domain for Organization Virtual Machines
You can set a default domain which virtual machines created in your organization can join. Virtual machines
can always join a domain for which they have credentials, regardless of whether or not you specify a default
domain.
You are an organization administrator.
Procedure
1 Click Administration.
2 In the left pane, select Settings > Guest Personalization.
3 Select the Enable domain join for virtual machines in this organization.
4 Type the domain name, domain user name, domain password.
These credentials apply to a regular domain user, not a domain administrator.
5 Click Apply.
Enable Your Organization to Use an SAML Identity Provider
Enable your organization to use an SAML identity provider, also called single sign-on, to import users and
groups from an SAML identity provider and allow imported users to sign on to the organization with the
credentials established in the SAML identity provider.
Prerequisites
n
Verify that you are logged in as a system or organization administrator.
n
Verify that you have access to an OpenAM or Active Directory Federation Services SAML identity
provider.
vCloud Director User's Guide
40 VMware, Inc.