5.1

2 Type the hostname or IP address for the public REST API base URL.
This can be the address of the load balancer or some other machine that can route traffic to the HTTP
service IP.
3 Click Apply.
XML responses from the REST API include the base URL and the transfer service uses the base URL as the
upload target.
Configure the Account Lockout Policy
You can enable account lockout to prevent a user from logging in to the Web console after a certain number
of failed attempts.
Changes to the system account lockout policy apply to all new organizations. Organizations created before the
account lockout policy change must be changed at the organization level.
Procedure
1 Click the Administration tab and click Password Policy in the left pane.
2 Select the Account lockout enabled check box, the System Administrator account can lockout check box,
or both.
3 Select the number of invalid logins to accept before locking an account.
4 Select the lockout interval.
5 Click Apply.
Configure vCloud Director to use vCenter Single Sign On
When vCenter Single Sign On is configured and enabled, system administrators are authenticated by the
vSphere identity provider.
Prerequisites
Set up vCenter Single Sign On and take note of the vCenter Lookup URL. See the vSphere documentation.
Procedure
1 Click the Administration tab and click Federation in the left pane.
2 Click Register.
3 Type the vCenter Lookup Service URL.
4 Type the user name of the vSphere Single Sign On user with administrator privileges.
5 Type the vSphere Single Sign On password for the user name entered above.
6 Type the URL of the vCloud Director you are configuring, and click OK.
7 Select Use vSphere Single Sign-On and click Apply.
System administrators are asked for vCenter Single Sign On credentials to log in to vCloud Director.
What to do next
Import vCenter Single Sign On users and groups. See “Import a System Administrator,” on page 113 and
“Import a Group,” on page 115.
Chapter 9 Managing System Settings
VMware, Inc. 129