Configuring SSO

You can configure Enterprise Single Sign-On by using command line utilities, UI tools, or COM or Microsoft .NET interfaces.

SSO command line utilities

You use three different command line utilities to perform Enterprise Single Sign-On tasks:

SSOConfig. Enables an SSO administrator to configure the SSO database and to manage the master secret.

SSOManage. Enables SSO administrators, SSO affiliate administrators, and application administrators to update the SSO database to add, delete and manage applications, administer user mappings, and to set credentials for the affiliate application users. Some operations can be performed only by the SSO administrators, or, only by the SSO administrators and SSO affiliate administrators. All operations that can be performed by the Application Administrators can also be performed by the SSO Administrators and the SSO Affiliate Administrators.

SSOClient. Enables Single Sign-On users to manage their own user mappings and set their credentials.

For more information about the SSO accounts, see SSO User Groups.

SSO UI tools

Enterprise SSO MMC Snap-in. Enables SSO Administrators, SSO Affiliate Administrators, and Application Administrators to update the SSO database, to add, delete and manage applications, administer user mappings, and to set credentials for the affiliate application users. Some operations can be performed only by the SSO administrators, or only by the SSO administrators and SSO affiliate administrators. All operations that can be performed by the Application Administrators can also be performed by the SSO Administrators and SSO Affiliate Administrators.

SSO Client Utility. Enables end users to manage their own mappings and set their credentials using the UI tool.

SSO COM and .NET interfaces

Enterprise Single Sign-On provides COM and .NET programmatic interfaces that enable you to create custom components, and to create scripts to facilitate the administration of the SSO system.

See Also

SSO Components