Search Vcf Sso Groups
Searches for user groups from VCF SSO Identity Provider using SCIM 2.0 protocol. Used to discover available AD/LDAP groups for HCX role mapping configuration.
Details:
- Internally queries VCF SSO (vIDB) via SCIM 2.0 Groups API
- Supports pagination (startIndex, itemsPerPage)
- Filter by group name (partial match)
- Returns group ID, display name, and domain
- Maximum 100 results per page (default)
Prerequisites:
- vIDB (VCF SSO) must be configured (/api/admin/global/config/vidb)
- OAuth client credentials must be valid
- HCX Manager must have network connectivity to VCF SSO
Pagination:
- Use startIndex for pagination (1-based index)
- Use count to control page size (max 100)
- Check totalResults to determine if more pages exist
Group name filter (partial match, case-insensitive)
Admins
Number of results to return (page size)
50
Starting index for pagination (1-based)
1
Successfully retrieved VCF SSO groups
{
"totalResults": 25,
"startIndex": 1,
"itemsPerPage": 10,
"idpGroups": [
{
"id": "12345678-90ab-cdef-1234-567890abcdef",
"displayName": "vsphere.local\\Administrators",
"domainName": "vsphere.local"
}
]
}
Total number of groups matching the filter
Starting index of returned results (1-based)
Number of results in this page
List of VCF SSO groups
Bad request - Invalid search parameters
{
"isSuccess": false,
"message": "Request schema validation failed",
"httpStatusCode": 400
}
Indicates if the operation was successful
Human-readable error message
HTTP status code
Internal server error - Failed to search VCF SSO groups
{
"isSuccess": false,
"message": "Request schema validation failed",
"httpStatusCode": 400
}
Indicates if the operation was successful
Human-readable error message
HTTP status code
curl -H 'Authorization: <value>' https://{api_host}/api/admin/global/config/roleMappings/idp/searchGroups