You need this pairing bundle to complete the Enrollment Server setup steps when you are configuring your Horizon Cloud environment for True SSO. You download the pairing bundle from the Horizon Universal Console's Active Directory page.

Important: The True SSO configuration is a tenant-wide type of configuration. The True SSO configuration will apply across all of your pod fleet's Horizon Cloud pods in Microsoft Azure. As a result, after you have successfully configured True SSO in your Horizon Cloud tenant for the first time, and then you later subsequently deploy additional Horizon Cloud pods into your Microsoft Azure subscriptions using the automated pod-deployment wizard, the system will send the same True SSO configuration to all of those pods and attempt to validate the same True SSO configuration against those pods.
The pairing bundle contains a certificate file for each one of the Horizon Cloud pods deployed in Microsoft Azure for your Horizon Cloud environment. For the pods for which you want to configure True SSO, you upload those pods' certificate files to the Enrollment Server. When you have one pod, the bundle contains one certificate file in CRT format. When you have more than one pod, the bundle contains multiple CRT files, one per pod. The name of each CRT file follows the pattern: 
podID_truesso.crt
where podID is the pod's ID that is displayed in the pod's summary page.

Procedure

  1. In the console, navigate to Settings > Active Directory.
  2. In the True SSO Configuration area, obtain the pairing_bundle.7z file by clicking Download Pairing Token.
  3. Save the file to a location where you can extract its contents.
  4. For the pods for which you want to configure True SSO, extract the pods' CRT files from the pairing bundle to a location where you can retrieve them when you are setting up the Enrollment Server.
    The pairing bundle contains a certificate file for each pod in your environment. Each CRT file name follow the pattern podID_truesso.crt, where podID is the pod's ID value.
  5. Set up the Enrollment Server by following the steps in Horizon Cloud - True SSO - Set up the Enrollment Server.