An administrator is configuring an identity source for Single Sign-On. The administrator will use the machine that Single Sign-On is running on, but does not want all users on the machine to be…

Active Directory (Integrated Windows Authentication) leverages the machine's AD integration, allowing administrators to specify particular AD users or groups for SSO access. This provides granular control, ensuring not all local operating system users are automatically exposed.

Active Directory as an LDAP Service is used when the vCenter Appliance is not directly joined to the AD domain, offering similar control but not being the most direct method when using the machine's AD.

OpenLDAP is a generic directory service and does not inherently offer the integrated Windows authentication features or the specific granular control over local machine users as required.

LocalOS identity sources typically expose all local operating system users, directly contradicting the requirement that not all users on the machine should be visible to SSO.