ChrisM.66338 (Customer) asked a question.
need help setting up OKTA MFA for vCenter - specifically SCIM
we are setting up MFA for our vCenter (8) - following the vmware documentation, one of the steps is to create a SCIM application in Okta. In the SCIM app setup, under: Provisioning, Enable API integration - I fail the TEST API
with the following:
Please review the form to correct the following error(s): Error authenticating: null
The VMWare documentation, at this step, says:
Note: If the network is not publicly available, create a network tunnel between the vCenter Server system and the Okta server, then use the appropriate publicly accessible URL as the Base Uri.
this may be a dumb question, what exactly is this asking for and how do I set it up??
onprem vcenter to okta
any help appreciated
Hi @ChrisM.66338 (Customer) , Thank you for reaching out to the Okta Community!
As far as I can see the vCenter implementation is not an out-of-the-box feature of the Okta catalog, so there is not documentation or guide that I might offer for assistance.
That being said, from the details you provided, the integration implies a on-premise part which would require access to the internet to be able to connect to the Okta services.
As far as Okta is considered, please review the following documentation for all you might need to add to you network allow-lists:
https://help.okta.com/en-us/content/topics/security/ip-address-allow-listing.htm
The above documentation references all Okta environments/domains/IPs but you will just need to look up those that apply to your specific Okta tenant. To find out where your tenant is hosted, check the bottom of your Okta Admin dashboard where it says for example “ OK2 Cell (US) “.
As for the actual configuration steps, you will need to leverage your Network Team and VMWare support for assistance.
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--------------------------------
Ask the Experts: Now Thru 1/31 Okta FastPass Engineering and Product Teams Answer Your Questions