An administrator has been tasked with configuring VCF Single Sign-On (SSO) in VCF Operations.

Directory name: rainpole-io

Primary domain controller: ldap://dc01.rainpole.io

Primary domain controller port: 389

Directory search attribute: Custom Attribute

Custom directory search attribute for Users: uid

Custom directory search attribute for Groups: gid

Base DN: OU=Corporate, DC=rainpole, DC=io

Bind user name: CN=svc_ad01, OU=Users, OU=Corporate, DC=rainpole, DC=io

Bind user password: VMware123!

The configuration must match the OpenLDAP hierarchy and transport requirements. Because the directory does not support SSL/TLS, the primary domain controller must use the non-secure LDAP scheme, ldap://dc01.rainpole.io , with standard LDAP port 389 , not LDAPS port 636. The directory name should use the VCF SSO directory identifier format, therefore rainpole-io is selected. Since the environment uses OpenLDAP-specific attributes rather than Active Directory defaults, the directory search attribute must be set to Custom Attribute . The user identifier is uid , so the custom user search attribute is uid; the group identifier is gid , so the custom group search attribute is gid. The Base DN must cover both the Users and Groups OUs. Because both are inside OU=Corporate , the correct base scope is OU=Corporate, DC=rainpole, DC=io , not only Users or only Groups. The bind user resides in the Users OU, so the bind DN is CN=svc_ad01, OU=Users, OU=Corporate, DC=rainpole, DC=io with password VMware123! . Reference topic: Objective 4.14 – Fleet Management / Identity and Access Management / VCF Single Sign-On / LDAP Identity Provider Configuration .