When a vCenter Single Sign On user account is disabled, the user cannot log in to the Single Sign On server until the account is enabled by an administrator.

Disabled user accounts remain available in the Single Sign On system, but the user cannot log in or perform operations on the server. Users with appropriate privileges can disable and enable accounts on the Administration page.

You must be a member of the Single Sign On Administrators group to manage disabled Single Sign On users.


Browse to Administration > Access > SSO Users and Groups in the vSphere Web Client.


Click the Disabled Users tab.


Right-click the user and select Enable.

The Single Sign On user account is enabled, and the user can log in and perform operations immediately.