Windows Native Authentication

It is necessary to create a user account in the AD server with the same host name where your SSO server is running.

Login to the AD server as "Administrator"

Click Start -> Programs -> Administrative Tools -> Active Directory Users and Computer

Select the "Users" folder.

Click the "Create User" button

The First name, Last name, and Login name should all be set to the host name of the computer where your SSO server is running.

For instance, if you SSO server has a fully qualified domain name of "aspen.us.oracle.com" then the you need to create a user in the AD server with a first name, last name, and full name of "aspen".

Click the "Next" button

Assign a password for this user. This user account will be synchronized with the OID server.

Note: Do not select any password expiration settings.

Watch a viewlet to see how its done.