A.Use a Service Principal Name (SPN) to configure the Identity Source.
B.Use a Domain administrator to configure theIdentity Source.
C.Join the VCSA to Active Directory and configure the Identity Source with a Machine Account.
D.Create a computer account in Active Directory for the VCSA and configure the Identity Source.
Using a machine account when configuring an Active Directory identity source for vCenter Server
requires that the Windows system be joined to the domain. If the system is not joined to the
domain, SSO cannot leverage the machine account to create the identity source and perform its
function as the secure token service user.
To resolve this issue in VCVA 5.5, use only the Use SPN option.