vsphere.local SSO

[nbctcp3]

Hi,

I need suggestions from all of you

I install VCSA 6.7 in HQ and Branches

?

1. should I use vsphere.local or domain.com as my SSO domain.

I believe vsphere.local not in my dns server

2. I believe, if I add a new user in SSO in HQ. it won't appear in SSO Branch,

Unless I configure VCSA replication

thanks

[daphnissov · Accepted solution]

Your SSO domain should always be separate from any external identity sources. So if your Active Directory domain is corp.local your SSO should not be this name. In almost all cases, do not change the default from vsphere.local.