This section includes the procedures for setting up the infrastructure required for True SSO configuration.

Before adding a True SSO configuration on the Active Directory page, complete the tasks below.

  • Install and configure a Windows Server Certificate Authority (CA)
    Note: The procedures in this section are for Windows Server 2012 R2. Very similar steps can be followed on Windows Server 2008 R2.
  • Set Up a certificate template on the CA
  • Set up the Enrollment Server (ES)

The CA will issue certificates on behalf of the users, and those certificates will be used to log the users in to their allocated desktops. Horizon Cloud appliance will ask the ES to issue certificates on behalf of users. The ES will generate the requested certificate on behalf of the requested user via the CA and return it to the Horizon Cloud appliance.