Members of a vCenter Single Sign On group can be users or other groups from one or more identity sources. Members of a group are called principals.

Groups listed on the Groups tab in the vSphere Web Client are internal to Single Sign On and are part of the identity source System-Domain. You can add group members from other domains to a local group.

1

Browse to Administration > Access > SSO Users and Groups in the vSphere Web Client.

2

Click the Groups tab and click the group (for example, Administrators).

3

Click Add Principals.

4

Select the identity source that contains the principal to add to the group.

5

(Optional) Enter a search term and click Search.

6

Select the principal and click Add.

You can simultaneously add multiple principals.

7

Click OK.