Comments on: Single Sign On Nutanix Prism Central

By: Prasad Gandhi

Prasad Gandhi — Tue, 25 Nov 2025 20:05:52 +0000

In reply to Shannon L. manually update the metadata XML file - replace the IP address with FQDN name

By: Jeroen

Jeroen — Thu, 25 Sep 2025 05:27:23 +0000

In reply to Misha. Hi Misha, My blogpost is a bit outdated as it is possible to use groups nawadays. But you can not search groups in pc. But this is just because pc is not directly connected/communicating to entra id at all. This is how saml works.

By: Misha

Misha — Wed, 24 Sep 2025 12:37:05 +0000

Hi Jeroen,

It helped me configure EntraID in our lab environment.
Do you know if you need set some special permissions to be able to search groups and users from Prism Central when creating an Auth Policy?
At the moment I can only paste in the exact AD group name but I can’t search, it could be that this is a Prism Central limitation.

Thanks in advance,

Misha

By: Jeroen

Jeroen — Mon, 20 May 2024 14:29:52 +0000

In reply to Shannon L. Yes if you are running the commercial version then you are good to go with support. Or if you are at .next this week in Barcelona let me know and I will help you.

By: Shannon L

Shannon L — Mon, 20 May 2024 14:28:23 +0000

Thank you…after following your link I was able to set the FQDN to my dns name In PC Management. I then download the xml file from Prism again and it shows the DNS name in the .xml file and not the IP so that was good.
I made sure I re-imported in Entra, but I still get the following error: Application with identifier ‘https://:9440/api/iam/authn’ was not found in the directory ”.
I rebooted PC even.

I wonder if support would help me otherwise…

By: Jeroen

Jeroen — Fri, 17 May 2024 19:42:51 +0000

In reply to Shannon L.

You need to set the fqdn for prism central, and make sure this is on the dns. https://portal.nutanix.com/page/documents/details?targetId=Prism-Central-Guide-vpc_2023_4:mul-pc-management-c.html

By: Shannon L

Shannon L — Fri, 17 May 2024 19:17:38 +0000

Great instructions.
When I download Idp Configuration from PC, for some reason it generates my xml file as an IP address instead of the dns name I use to access prism.
So then when I upload that to entra, entra gets confused and expects an IP.
I tried to change it in the xml file to my dns name and in entra, but no luck.

I also noticed that in https://pc.companyname.com:9440/PrismGateway/services/ it lists my IP in the RESTful services.

Wondering how i can use my dns name like you do in your instructions?

By: Shannon L

Shannon L — Fri, 17 May 2024 18:26:59 +0000

Great instructions…been looking for this for a while.
I kinda got everything working, but when I am in the IdP onfig and click on the “download Metadata” button it generates my prismcentral.companyname.com as it’s IP address X.X.X.X.
Now I tried to change the metadata file from IP address to prismcentral.companyname.com and then upload it to Entra, but it still tried to find my IP vs the name.
I noticed when I go to: https://prismcentral.companyname.com:9440/PrismGateway/services/
it references my IP address again instead of domain name in the RESTful services.

Any idea on this?