Topic: vcf-identity-zero-trust

2026

1. August 17, 202614 min read

   VCF identity and zero trust · 03/03

   vDefend Distributed Firewall: zero trust at the workload level

   Least-privilege policy per vNIC, built on dynamic groups and tags rather than IP addresses — and the honest boundary where federated identity stops and the firewall starts.

2. August 17, 202616 min read

   VCF identity and zero trust · 01/03

   VCF Identity Broker: where VCF 9.1 single sign-on actually stops

   VCF Identity Broker federates login across the VCF consoles, but the documented perimeter is narrower than the pitch. We map what it covers, what stays local, and the break-glass path.

3. August 17, 202616 min read

   VCF identity and zero trust · 02/03

   Federating VCF identity: Okta, Entra ID, and the generic path

   Four identity providers are documented by name, each with its own protocol path. Everything else goes through generic SAML 2.0 — a route that works without being a support statement.