VMware vSphere 5.5 added three new components which affect the way the CloudControl performs authentication and authorization. These new components are:
vCenter Single Sign On (SSO) Server—provides single authentication for users accessing multiple resources in a vSphere environment.
vCenter Inventory Service—offloads multiple client inventory requests by handling those requests directly and reducing the load on the vCenter Server.
vSphere Web Client Server—enhances the functionality of the existing vSphere Client allowing management of the virtual infrastructure using a cross-platform web browser.
In supporting vSphere 5.5 environments CloudControl proxies all communication from the Web Client to the Web Client Server to protect the virtual environment.
The following figure shows how communication occurs between CloudControl and the various vSphere 5.5 components.