Edit

Deployment Overview

  • Article

The system in this example is deployed over three domains, and contains the following computers:

Domain ORCH.com

  • ORCH domain controller

  • HIS1, the HISSO server

  • HIS2, the master secret server

  • HIS3, the Admin database

    Domain SQL.com

  • SQL domain controller

  • SQL2, the SSO database

    Domain HIS.com

  • HIS domain controller

  • HIS4 database

    The key points defining this deployment are as follows:

  • Domain ORCH.com and domain SQL.com have a two-way selective trust relationship.

  • Domain ORCH.com is configured as native Windows Server functional level.

  • All SSO services are running on an ORCH.com domain user account (Orch\SSOSvcUser). The user is configured to have access permission on the SQL2 machine in the SQL.com domain. The user is configured for protocol transition and constrain delegation within the ORCH.com domain.

  • Another ORCH.com domain user (Orch\TestAppUser) is set for running test programs. This user is also configured for protocol transition and constrain delegation.

    For a description of the deployment process, see Deployment Process

See Also

Secure Deployment of Enterprise Single Sign-On
Deployment Process