VMWare VCSA (vCenter Server Appliance) has multiple authentication methods available:
- Localos users (managed via ssh > shell)
vSphere localos accounts can only be managed via the Custom Platform feature.
- An internal SSO “domain” such as user@vpshere.local (which uses LDAP)
Directory accounts can be managed using the LDAP/LDAPS platform on 2.5.921 and above. When managing VCSA with the LDAP platform, place Y in the “Use Modify” field. This will force TPAM to use the standard modify/replace of the userPassword field. If that field is not populated, or any value other than “Y” is interpreted as N and will use the Modify Password extended LDAPv3 operation as described in RFC 3062.