Which role is required to configure vCenter Single Sign-On from the vSphere Client?

To configure vCenter Single Sign-On (SSO) from the vSphere Client, the role required is the vCenter Single Sign-On Administrator. This role has the necessary permissions to manage users, groups, and identity sources specifically for the Single Sign-On service. The vCenter Single Sign-On Administrator role encompasses the functions needed to configure and modify SSO settings effectively.

Other roles, such as the vCenter Administrator or vCenter Server Appliance Root, have broader permissions over the vCenter environment or the underlying server but do not necessarily include permissions specific to managing SSO configurations. The vCenter Power User role is primarily focused on resource management and lacks the specific privileges required for altering Single Sign-On settings. Therefore, the vCenter Single Sign-On Administrator role stands out as the essential choice for this task.