VMware vCloud Director (since 10.1 version Cloud Director) delivers whole stack to set up and deliver infrastructure as a service to end user. It has a bunch of some cool features, especially in network aspects delivered by NSX, as well as support for buzz word of the last time - Kubernetes, but there is one missing functionality when it comes about more secure access to tenant portal. Well, maybe not missing, but not provided out of the box - I mean 2FA. I will show you how to set up this with SAML Identity Provider, in this case - Keycloak and Google Authenticator . Let’s dig around of it!