...
If you do not want to expose the DualShield SSO server to the public network, for reasons such as that your DualShield SSO server does not have a public FQDN, or it does not have a commercial certificate, then you can take advanatge advantage of the IIS Reverse proxy function. By using the IIS reverse proxy, to the users, your DualShied SSO seems to be an integrated part of your web application. The IIS Reverse proxy not only saves you from publishing your DualShield SSO server, it alslo also gives better user experience to users.
...