Thanks for the quick response. Are your screenshots from the VCSA, or from a full install on a Windows Server?
The lack of SSO use for direct ESXi logins seems weird to me. I could design a datacenter where the ESXi hosts use /etc/passwd and AD for authentication, but vCenter uses OpenLDAP but not AD.