What's the order of operations for Active Directory authentication?

[charlespick]

I deployed vCenter Server and setup the local SSO domain as lets say domain.com

My Windows Server based Active Directory is also domain.com. I was able to join the vCenter server to the domain but when trying to add it as an identity source, it's complaining that domain.com is already taken. I can't delete the domain.com local sso identity provider because I'm using it to login. I can't figure out how to use the localos root account to login to vsphere web client. So what do I have to do? Should I just redeploy with a different name and then setup active directory again?

Charles

[pmichelli · Accepted solution]

You have to re-deploy. You cannot have the local vCenter domain the same as your AD as you've noticed.

Why not just leave it vsphere.local?

[charlespick]

I wasn't aware that most people just leave it as vsphere.local and thought that you're supposed to change it.