(cas:72) Google Analyticator was unable to authenticate you with Google using the Auth Token you pasted into the input box on the previous step.

This could mean either you pasted the token wrong, or the time/date on your server is wrong, or an SSL issue preventing Google from Authenticating.

Try Deauthorizing & Resetting Google Analyticator.

Tech Info 400:Error fetching OAuth2 access token, message: 'invalid_grant'
Unique
Visitors
Powered By Google Analytics
Comments on: vSphere 5.1 Gotcha with Single Sign On (SSO) http://longwhiteclouds.com/2012/09/26/vsphere-5-1-gotcha-with-single-sign-on-sso/ all things Nutanix, VMware, cloud and virtualizing business critical applications Sun, 03 Mar 2013 21:53:19 +0000 hourly 1 https://wordpress.org/?v=6.7.6 By: » Disabling vSphere 5.1 Single Sign-on (SSO) – Don’t do it! Long White Virtual Clouds http://longwhiteclouds.com/2012/09/26/vsphere-5-1-gotcha-with-single-sign-on-sso/comment-page-1/#comment-8047 Sun, 03 Mar 2013 21:53:19 +0000 http://longwhiteclouds.com/?p=1457#comment-8047 […] vSphere 5.1 Gotcha with Single Sign On (SSO) […]

]]> By: Fajar Priyanto http://longwhiteclouds.com/2012/09/26/vsphere-5-1-gotcha-with-single-sign-on-sso/comment-page-1/#comment-4035 Mon, 12 Nov 2012 17:15:35 +0000 http://longwhiteclouds.com/?p=1457#comment-4035 In reply to orenfeldman.

Oren, I've got impression you're not using the Web Client? Pls install the Web Client from the 5.1 ISO. In 5.1 all authentication now goes to SSO not the vCenter anymore.

Pls have a look this two links, hopefully it helps:
http://kb.vmware.com/kb/2032135 http://blogs.vmware.com/vsphere/2012/09/vcenter-s…

]]> By: orenfeldman http://longwhiteclouds.com/2012/09/26/vsphere-5-1-gotcha-with-single-sign-on-sso/comment-page-1/#comment-4034 Mon, 12 Nov 2012 17:00:51 +0000 http://longwhiteclouds.com/?p=1457#comment-4034 Too many things have been changed in the configuration since the upgrade, I don't want to redo it…

Not sure what do you mean by "define your AD in SSO" where should I do it? I do have vCenter single sign on service running on my vCenter server but I don't see where to configure stuff related to the SSO.

I configured on each host in the Authentication services my domain but it is still not letting me login with my AD users.

Thanks for your help mate!

]]> By: Fajar Priyanto http://longwhiteclouds.com/2012/09/26/vsphere-5-1-gotcha-with-single-sign-on-sso/comment-page-1/#comment-4033 Mon, 12 Nov 2012 16:42:11 +0000 http://longwhiteclouds.com/?p=1457#comment-4033 Did you do the upgrade logged on to the vCenter VM as domain user or local user?

If you logged on as domain user SSO will automatically connect to your AD and will recognize domain users you have. If you logged on locally during the upgrade you need to define your AD in SSO after upgrade. If you have backup, you can try to redo the whole process.

]]> By: orenfeldman http://longwhiteclouds.com/2012/09/26/vsphere-5-1-gotcha-with-single-sign-on-sso/comment-page-1/#comment-4031 Mon, 12 Nov 2012 16:30:42 +0000 http://longwhiteclouds.com/?p=1457#comment-4031 In reply to Fajar Priyanto.

Upgrade already done, I'm not aware of any connectivity issues while I upgraded but maybe…

My SSO and vCenter is the same machine (VM by the way)

Anything I can do now, after the upgrade?

]]> By: Fajar Priyanto http://longwhiteclouds.com/2012/09/26/vsphere-5-1-gotcha-with-single-sign-on-sso/comment-page-1/#comment-4029 Mon, 12 Nov 2012 16:13:27 +0000 http://longwhiteclouds.com/?p=1457#comment-4029 In reply to Oren.

Hi Oren,

Make sure during the upgrade the connectivity to your AD from vCenter and SSO is established all the time. SSO behaves very differently if it's not connected to AD when you do the upgrade.

]]> By: Oren http://longwhiteclouds.com/2012/09/26/vsphere-5-1-gotcha-with-single-sign-on-sso/comment-page-1/#comment-4028 Mon, 12 Nov 2012 15:42:36 +0000 http://longwhiteclouds.com/?p=1457#comment-4028 Hi, Great article, Thanks for sharing your experience with us!

I've had a similar problem that after upgrade from 4.1 to 5.1 I couldn't login to vCenter with any domain users. I can login only with a local user of the windows machine that running my vCenter. I still didn't find a solution for it, do you have any tips?

]]> By: @vcdxnz001 http://longwhiteclouds.com/2012/09/26/vsphere-5-1-gotcha-with-single-sign-on-sso/comment-page-1/#comment-3289 Tue, 16 Oct 2012 19:18:13 +0000 http://longwhiteclouds.com/?p=1457#comment-3289 In reply to Simon Jones.

Hi Simon, Which domain in the vCenter in? The domain with the groups? Which way is the trust and what type of trust? This scenario will be even more interesting when SSO is bought into the mix.

]]> By: Simon Jones http://longwhiteclouds.com/2012/09/26/vsphere-5-1-gotcha-with-single-sign-on-sso/comment-page-1/#comment-2914 Mon, 08 Oct 2012 22:50:50 +0000 http://longwhiteclouds.com/?p=1457#comment-2914 Hi Michael,

Not sure if you have come across this or even if it's a supported configuration. For one of the VC instances I have the Users are in one domain but the Groups they belong to are in another domain and there is a trust in place. Good practice is to use groups, so is this a configuration that could be used because in my lab I haven't been able to get it working yet.

]]> By: Fajar Priyanto http://longwhiteclouds.com/2012/09/26/vsphere-5-1-gotcha-with-single-sign-on-sso/comment-page-1/#comment-2836 Sat, 06 Oct 2012 19:28:23 +0000 http://longwhiteclouds.com/?p=1457#comment-2836 In reply to @vcdxnz001.

You're welcome Michael, I've got this the hardway 🙂

I've mentioned this in Singapore VMUG, hopefully the VMware documentation team is willing to put something about it in the docs. It could be maddening like David said 🙂

]]>