If I want to use MOSS 2007 Single Sign-On, do my users HAVE TO be Active Directory users?

Question

I want to use MOSS 2007's single sign-on feature, but read that the server needs to be in an Active Directory environment. This I understand, but does this mean all my users HAVE TO be Active Directory users? Can I not use MOSS2007 Single Sign-on if my users are authenticated using Forms Authentication (using a custom membership provider?).

Answer 1

You can, but you'd have to write your own SSO provider. The default one only works with Windows identities.

Edit: There's a walkthrough on MSDN for creating them, if you want to go that way.

Answer 2

I successfully created a getuserprofile UDCX and configured SSO and works like a charm for me and my User Name.

However, I am confused about adding accounts? Do I have to add all my users individually in the Manage Account Information for an Enterprise Definition.

If so, that means I need the user password info OR am I missing something.

-Stephen

Answer 3

when i connect SP server with CS server using SSO, does the roles and user permissions for SP users transfered with the user, so if i created new sp user with read role, then i accessed cs server, i will find that a role created for that user in the cs with read permissions?