Enterprise Manager - modify login page

[efd121]

We've updated EM to use SSO and its working as expected but I'm looking for a way to remove the standard login from the webpage so we can force Single Sign-On.
Our SSO requires MFA.
Can anyone point me in the right direction to remove that section of the page?
Dave

[Mildur]

Hello David

I checked with the team and unfortunately we cannot hide the standard login form.
If you enable SAML configuration in EM, users can log in to the vSphere Self-Service Backup Portal with SSO accounts only.

Best,
Fabian

[pirx]

I've enabled SAML, get redirected to our companies portal and I'm able to login with domain account and MFA. But the old way without SSO and MFA still works, is there any way to disable this - at least for AD users? I already looked in Web.config but if I disable useWindowsAuth login does not work after authentication in Azure AD.

[HannesK]

Hello,
I added your request +1 to the existing feature request.

Best regards,
Hannes

[pirx]

oh, what a bummer. That's the end for BEM here.

[alavik]

Hello,

This is quite concerning. The purpose of using MFA is undermined if the default account remains accessible, and it's impossible to disable or remove it. We are forced to maintain a local Portal Admin account, which significantly weakens our security posture.