Symantec Privileged Access Management

Try to set domain name instead of IP for vCenter device in CA PAM. This should resolve such issue.

 Here are general steps for Learn Mode/Web SSO configuration for vSphere 6.

1. Create device with vCenter server domain name in Address field (IP won't work). 
2. Create service for vCenter Web SSO with 443 port (9443 port won't work). 
3. Launch URL in service must be: https://<Local IP>:<First Port>/vsphere-client

Hei my friend,

These procedures, I did before and it did not work in my scenario. I use the version 2.8.

Hi Paulo

We recently dealt with a similar error. The iframe problem is due to the fact that modern browsers will block directing to a different domain within a frame. Please take a look at

http://stackoverflow.com/questions/25098021/securityerror-blocked-a-frame-with-origin-from-accessing-a-cross-origin-frame

for instance

VSphere 6 login form is based on iframe.

This iframe is always redirected by vCenter server to the URL that includes FQDN configured in vCenter and may be different from that which is configured in PAM.

I'm suggesting to navigate to vSphere 6 login page from native browser (FireFox or Chrome), open "Developer tools" (F12) and then look in Network tab at URL to which your browser is redirected and set proper FQND in device configuration on PAM. 

You may as well use fiddler to do the same. If the above recommendation does not help, I would suggest you to open a case with support as this will require further investigation and likely Engineering involvement.

Hi Miquel Gilibert,

I was able to solve with your tip, thank you!

Paulo, could you provide the url you ended up using.  I am working with a customer with the same issue and the only other url includes a SAML token and won't load unless we provide the token.  Would appreciate seeing your redacted URL if you don't mind sharing?