1, When installing the SSO service it doesn't pick up AD as a valid identity source, but according to the documentation, it should. I'm running the installation as a local administrator, and the box is joined into the AD domain, however, I don't have domain admin privileges. Should I try it while logged in with a user from the domain, or does it really have to be a domain admin user logged in to install the SSO service?
2, The documentation explicitly sais that if I use OpenLDAP and there's a special character in the login name, like a "@", it won't work. However, in our organization, all of the users have IDs like that. Is there a way to get it to work, even unofficially?
3, currently on the hypervisor I'm using AD authentication; if I migrate such a system to a vcenter which does not have AD in the SSO identity sources, will the users still be able to log in on the hypervisor itself using their AD credentials? (if I don't disable local logins on the vSphere nodes, of course).