DualShield Authentication Server supports Windows Desktop SSO single sign on to the web application. In this article, we configured the DualShield Self Service Console with desktop single sign on. If you have not configured the Self-Service-Console to use Desktop SSO, please follow the chapter DualShield Server Configuration [SSO].
Step 1: Login to DMC, change default "Self-Service Console" appication's name to "Self-Service-Console".
Step 2: Assign the application "Self-Service-Console" to agent "SSO server". It will bind to two agents: SSO Server & Self-Service Console.
Step 3: Login to DualShield Authentication server machine, copy the file "appsso-metadata.xml" which is located under "\Program Files\Deepent DualShield\config" to a new file, and renamed it as "dss-appsso-metadata.xml".
Step 4: Modify the dss.properties file, update the das_application_name to "Self-Service-Console" and saml2_metadata_others value to "dss-appsso-metadata.xml".
Step 5: Modify the newly copied file "dss-appsso-metadata.xml", update the SingleSignOnService location url accordingly. i.e. https://dualshield.qadomain.com:8074/appsso/winsso/login/kvps/DASApplicationName/Self-Service-Console.
Step 6: Restart DualShield service.