...
The DualShield SSO server is always installed as an component of the DualShield backend and frontend server, as it is used by the DualShield consoles such as the Admin Console for the administrators and the Service Console for the end users. Therefore, commonly it is not neccessary for you to install a seperate DualShield SSO server (The Compact Deployment architecture). However, if need to use the DualShield SSO server for a SAML IdP for an external, clould based application, then you might want to install a DualShield SSO server in your DMZ (The Extended Deploymlent architecture).