A Provider administrator received a technical requirement mandating the use of Identity Providers (IdP) in...

VCF 9.0 Automation uses a decentralized identity architecture to support complex multi-tenant requirements. To ensure that the Provider Management Portal and Organizations use different source directories (e.g., the provider uses a management AD while tenants use their own OIDC/SAML IdPs), the administrator must Deploy an Identity Broker cluster per organization . The Identity Broker acts as the localized gateway for authentication for that specific tenant. To prevent Organization administrators from modifying these settings—satisfying the second requirement—the provider must Ensure that " Do not use LDAP " is configured for the organization ' s standard SSO settings. This configuration forces the organization to rely exclusively on the broker-mediated IdP managed at the provider level, effectively " locking " the identity configuration and preventing local tenant admins from reverting to a manual LDAP setup that might bypass corporate security policies or the centralized identity strategy.