none
Does SSO require BizTalk? RRS feed

  • Question

  • I am surprised I couldn't find an answer to this on google but does SSO require BizTalk? I want to decouple my current application from BizTalk for a variety of reasons. I assumed SSO would be a fairly straight forward install but I can't seem to find a way to install it except through BizTalk installation.

    Anyone?


    Shawn (Mail@ShawnAugust.Com)

    Wednesday, June 12, 2013 5:58 PM

Answers

  • The SSO setup executable can be found on on the BizTalk Server installation media in "DriveLetter:\BizTalk Server\Platform\SSO64\setup.exe" for 64-bit or "DriveLetter:\BizTalk Server\Platform\SSO\setup.exe" for 32-bit.

    Running this will install SSO only. Once you have installed it you must then configure SSO from the configuration tool that is installed.

    The above steps will allow you to install SSO independently of any BizTalk Server components.

    I'm not sure where you stand on licensing though.


    Colin Meade (MCTS BizTalk Server) http://midheach.wordpress.com

    Wednesday, June 12, 2013 6:54 PM

All replies

  • The SSO ships with the BizTalk license. 

    You can install SSO without installing BizTalk, but the configuration will happen through the "BizTalk Server Configuration".

    BizTalk, on the other hand, needs a Master SSO in order to configure a Group and an SSO Service running on each BizTalk Server.

    Morten la Cour.

    Wednesday, June 12, 2013 6:05 PM
  • The SSO ships with the BizTalk license. 

    You can install SSO without installing BizTalk, but the configuration will happen through the "BizTalk Server Configuration".

    BizTalk, on the other hand, needs a Master SSO in order to configure a Group and an SSO Service running on each BizTalk Server.

    Morten la Cour.


    I assumed it could be used without install BizTalk but 1) How do you install SSO? I can't find an installer anywhere aside from reading that it is deployed automatically with a BizTalk install 2) How do you configure it using "BizTalk Server Configuration" which sounds like it requires a BizTalk installation?


    Shawn (Mail@ShawnAugust.Com)

    Wednesday, June 12, 2013 6:24 PM
  • The SSO setup executable can be found on on the BizTalk Server installation media in "DriveLetter:\BizTalk Server\Platform\SSO64\setup.exe" for 64-bit or "DriveLetter:\BizTalk Server\Platform\SSO\setup.exe" for 32-bit.

    Running this will install SSO only. Once you have installed it you must then configure SSO from the configuration tool that is installed.

    The above steps will allow you to install SSO independently of any BizTalk Server components.

    I'm not sure where you stand on licensing though.


    Colin Meade (MCTS BizTalk Server) http://midheach.wordpress.com

    Wednesday, June 12, 2013 6:54 PM
  • The SSO setup executable can be found on on the BizTalk Server installation media in "DriveLetter:\BizTalk Server\Platform\SSO64\setup.exe" for 64-bit or "DriveLetter:\BizTalk Server\Platform\SSO\setup.exe" for 32-bit.

    Running this will install SSO only. Once you have installed it you must then configure SSO from the configuration tool that is installed.

    The above steps will allow you to install SSO independently of any BizTalk Server components.

    I'm not sure where you stand on licensing though.


    Colin Meade (MCTS BizTalk Server) http://midheach.wordpress.com

    Excellent. Thank you.

    SSO Administration and SSO Client Utility was installed but I can't seem to configure it. It keeps saying SSO isn't running on the server?

    I have a Visual Studio Premium with MSDN account through my company. I am not sure the cost but we currently use SSO in our production BizTalk environment.


    Shawn (Mail@ShawnAugust.Com)

    Wednesday, June 12, 2013 7:15 PM
  • Yes, as posted here, SSO can be used separate from BizTalk Server.

    From BizTalk Server Setup, you can install stand alone SSO by selecting just the Admin tools and the Master Secret Server.  You would then use BizTalk Configuration to create the SSO system (SSODB, service, etc).  A similar procedure can be done with the HIS media as well.

    However, SSO is only licensed with BizTalk Server so you would still need valid Processor Licenses for any machine running SSO.*

    Except for the special case when used in conjunction with BizTalk Server Enterprise Edition.

    Wednesday, June 12, 2013 8:02 PM
    Moderator
  • Check whether the Enterprise Single Sign-On service is running.

    Colin Meade (MCTS BizTalk Server) http://midheach.wordpress.com

    Wednesday, June 12, 2013 8:44 PM
  • Check whether the Enterprise Single Sign-On service is running.

    Colin Meade (MCTS BizTalk Server) http://midheach.wordpress.com

    It doesn't exist after installation using the .exe in your post.


    Shawn (Mail@ShawnAugust.Com)

    Wednesday, June 12, 2013 8:47 PM
  • Did you run into any errors during configuration? In configuration tool, under Windows Service, you should have configured the Enterprise Single Sign-On Service with the appropriate account. Did you complete this step?

    Can you post a screenshot of your configuration?


    Colin Meade (MCTS BizTalk Server) http://midheach.wordpress.com

    Wednesday, June 12, 2013 8:55 PM
  • Did you run into any errors during configuration? In configuration tool, under Windows Service, you should have configured the Enterprise Single Sign-On Service with the appropriate account. Did you complete this step?

    Can you post a screenshot of your configuration?


    Colin Meade (MCTS BizTalk Server) http://midheach.wordpress.com

    No errors during installation. I just clicked on the SS064/Setup.exe and it installed as expected. Where is the configuration tool located? I went into the SSO Admin and SSO Client Utility and tried to create the SSO DB and look for various points of configuration.

    Shawn (Mail@ShawnAugust.Com)

    Wednesday, June 12, 2013 8:59 PM
  • It will be under the Microsoft BizTalk Server 2010 folder under All Programs and will be called BizTalk Server Configuration. While it mentions BizTalk in the name you haven't actually installed or configured any BizTalk Server components.

    Colin Meade (MCTS BizTalk Server) http://midheach.wordpress.com

    Wednesday, June 12, 2013 9:02 PM
  • It will be under the Microsoft BizTalk Server 2010 folder under All Programs and will be called BizTalk Server Configuration. While it mentions BizTalk in the name you haven't actually installed or configured any BizTalk Server components.

    Colin Meade (MCTS BizTalk Server) http://midheach.wordpress.com

    There is no Microsoft BizTalk Server 2010 folder. The only installation was SSO using the SS064/Setup.exe from a BizTalk 2013 Enterprise ISO.

    Shawn (Mail@ShawnAugust.Com)



    • Edited by SAgosto Wednesday, June 12, 2013 9:09 PM
    Wednesday, June 12, 2013 9:08 PM
  • I got the same result with a SSO install from the BizTalk 2010 Enterprise ISO from MSDN. No service and no BizTalk directory with configuration utility.

    Shawn (Mail@ShawnAugust.Com)

    Wednesday, June 12, 2013 9:12 PM
  • Sorry I thought it was 2010 you were installing it from. I'm assuming there is no 2013 folder either?

    Colin Meade (MCTS BizTalk Server) http://midheach.wordpress.com

    Wednesday, June 12, 2013 9:12 PM
  • Sorry I thought it was 2010 you were installing it from. I'm assuming there is no 2013 folder either?

    Colin Meade (MCTS BizTalk Server) http://midheach.wordpress.com

    Yes sir. I tried both BizTalk 2010 and 2013 Ultimate. The SSO install just installed SSO Admin and the Client application. Do I need a reboot or something? I got no prompt... 

    Shawn (Mail@ShawnAugust.Com)

    Wednesday, June 12, 2013 9:14 PM
  • See above.  Using the BizTalk Server media (iso or folder, whichever you have):

    1. Run BizTalk Server Setup

    2. Under Additional Software, select ESSO Administration Module and ESSO Master Secret Server.

    3. Configure using BizTalk Server Configuration.

    That will give you a stand-alone SSO System.

    You can repeat this procedure on other computers to install additional members of the SSO system.  In that case, you would join the existing SSO system.

    The fist member of the group to be configured is by default the Master Secret Server, though it can be moved later.

    • Proposed as answer by Pål Carlsen Thursday, April 20, 2017 12:05 PM
    Wednesday, June 12, 2013 9:33 PM
    Moderator
  • Looks like you need to configure it from the command line, SSOConfig command, when SSO is installed independently of BizTalk.

    http://msdn.microsoft.com/en-us/library/aa745706(v=bts.10).aspx

    How do you plan on using SSO?


    Colin Meade (MCTS BizTalk Server) http://midheach.wordpress.com

    Wednesday, June 12, 2013 9:42 PM
  • See above.  Using the BizTalk Server media (iso or folder, whichever you have):

    1. Run BizTalk Server Setup

    2. Under Additional Software, select ESSO Administration Module and ESSO Master Secret Server.

    3. Configure using BizTalk Server Configuration.

    That will give you a stand-alone SSO System.

    You can repeat this procedure on other computers to install additional members of the SSO system.  In that case, you would join the existing SSO system.

    The fist member of the group to be configured is by default the Master Secret Server, though it can be moved later.

    This appears to be working for me. I will edit soon with my updates.


    Thanks everyone.


    Shawn (Mail@ShawnAugust.Com)


    • Edited by SAgosto Thursday, June 13, 2013 5:27 PM
    Thursday, June 13, 2013 5:03 PM
  • Looks like you need to configure it from the command line, SSOConfig command, when SSO is installed independently of BizTalk.

    http://msdn.microsoft.com/en-us/library/aa745706(v=bts.10).aspx

    How do you plan on using SSO?


    Colin Meade (MCTS BizTalk Server) http://midheach.wordpress.com

    As a configuration store for sensitive and nonsensitive data. I already have this implementation for my existing BizTalk implementation. I am porting the logic to reusable services and want to decouple from BizTalk. To me, SSO already works and didn't appear to have a dependency so I was going to keep it.

    Shawn (Mail@ShawnAugust.Com)

    Thursday, June 13, 2013 5:04 PM