Change vCenter 6.5 URIs / SSO redirect for vSphere Web Client

[jhinz]

Hi,

im struggling with the Urls of the vSphere Web Client and want to change it.

For default vCenter uses the Server-Hostname, but i have an internal Loadbalancer and want to use another external Url, internally all goes to the original hostname (HOST-Header rewrite).

All works fine without SSL errors, but the Url of Single Sign On still stays on hostname.

It is exactly the same as in this discussion: https://communities.vmware.com/thread/514184 - But no solution works.

Everytime i click on "vSphere Client" on the Startpage it redirects me:

1. https://vcenter.fqdn/ui

2. https://vcenter.fqdn/websso/SAML2/SSOSSL?RelyingPartyEntityId=....

When i use my Loadbalancer all works except SSO:

1. https://vcenter.external.com/ui

2. https://vcenter.fqdn/websso/SAML2/....

Anyone can help or have a solution?

Thank you in advance.

[rajen450m]

Hi jhinz​

This can be due to DNS resolution issue, it is not able to resolve the address and staying in hostname???

Do you have a VIP and url added in your DNS???

If you are using a proxy server, please bypass addresses by adding it to the exceptions list.

[jhinz]

Hi,

in DNS all Urls are resolvable and reachable.

No i think i need to replace the existing EndPoint-Url in SSO, but if i try this nothing changes...

I dont use VIP.

Which exceptions list do you mean?

[daphnissov]

The only supported method of changing that deals with an external load balancer. If you are trying to do that, what procedure did you use to change it? There are two Python scripts which must be run on the PSCs to update the SSO endpoint. The KB here details that procedure.