Microsoft® SharePoint® Server 2007 Bible

Implementing Single Sign-On

The Single Sign-On (SSO) capabilities provided with MOSS allow you to configure stored application passwords for individuals and groups. This allows smooth, integrated access between applications without continual password prompts to irritate users. Additionally, SSO gives you the capability to provide application access to groups of users that you would not normally give individual access to without having to distribute the username and password information. You can embed application integration within SharePoint and provide seamless information access.

The following components of MOSS can leverage SSO capabilities:

• Excel Services

• InfoPath Services

• Business Data Catalog

• Key Performance Indicators

• SharePoint Designer DataForm Web Part

• Custom Web Parts

To implement SSO to support your BDC application, follow these steps:

1.	On all Web front end servers and application servers in your SharePoint farm, start the Microsoft Single Sign-on Service.
2.	Log on to the server that will be configured as the master secret server for SSO and configure SSO.
3.	Create a new SSO encryption key.
4.	Create an enterprise application definition for your BDC application.
5.	Set the password for your application definition.
6.	Modify your BDC application definition file to use single sign-on.

Starting the Single Sign-On Service

The single sign-on service must be started on each web front end and application server in your farm. To start the service, follow these steps:

1.	For each ...