5.1

User Management 4
Security operations are often managed by multiple individuals. Management of the overall system is delegated
to different personnel according to some logical categorization. However, permission to carry out tasks is
limited only to users with appropriate rights to specific resources. From the Users section, you can delegate
such resource management to users by granting applicable rights.
vShield supports Single Sign On (SSO), which enables vShield to authenticate users from other identity services
such as AD, NIS, and LDAP.
User management in the vShield Manager user interface is separate from user management in the CLI of any
vShield component.
This chapter includes the following topics:
n
“Configure Single Sign On,” on page 31
n
“Managing User Rights,” on page 32
n
“Managing the Default User Account,” on page 33
n
“Add a User Account,” on page 33
n
“Edit a User Account,” on page 35
n
“Change a User Role,” on page 35
n
“Disable or Enable a User Account,” on page 36
n
“Delete a User Account,” on page 36
Configure Single Sign On
Integrating the single sign on service with vShield improves the security of user authentication for vCenter
users and enables vShield to authenticate users from other identity services such as AD, NIS, and LDAP.
With single sign on, vShield supports authentication using authenticated SAML tokens from a trusted source
via REST API calls. vShield Manager can also acquire authentication SAML tokens for use with other VMware
solutions.
Prerequisites
n
Single sign on service must be installed on the vCenter Server.
n
NTP server must be specified so that the Single Sign On server time and vShield Manager time is in sync.
See Setup vShield Manager in the vShield Installation and Upgrade Guide.
Procedure
1 Click Settings & Reports from the vShield Manager inventory panel.
VMware, Inc.
31