1. Login to the Student 12B image with the Administrator Account.

2. Click on the Start button and navigate to the Administrative Tools and click on Services.

3. In the Services dialog box. Locate the Microsoft Single Sign-on Service and double click it.

4. Click on the Log on tab. Select the ‘This account’ option and configure it with a domain account. After configuration, click on the OK button.

Note: I used the Administrator account to simplify the configuration process. Any other time, you would use a service account here. When configuring the Single Sign-On settings in the Central Administration site you would need to logon with the service account.

5. Right click on the Microsoft Single Sign-on services and click on the Start option. After start, close the Services window.

Note: After clicking on the Start Option is clicked. The Service Control dialog box displays the status

.

6. Navigate to the Central Administration web site and select the Operations Tab.

7. Go to the Security Configurations section and click on the Manage settings for single sign-on link. It will take you to the Manage Settings for Single Sign-On for MOSS01 page.

Note: You will notice that the Manage Server settings is your only available option. If you fail to configure the Microsoft Single Sign-On service with a service account - in our scenario the administrator account – no option would be available. They would all be grayed out.

8. In the Server settings section, click on the Manage server settings .

Note: You are taken to the Manage Server Settings for Single Sign-On page.

9. On the Manage Server Settings for Single Sign-On page in the Single Sign-On Administrator Account text box type the name of the group - we are using an individual account in our scenario - or user account – trainsbydave\administrator - that can set up and manage the single sign-on service. This account must be a member of the same domain to which the single sign-on service account belongs.

10. Next, on the Manage Server Settings for Single Sign-On page in the Enterprise Application Definition Administrator Account text box type the name of the group - we are using an individual account in our scenario - or user account – trainsbydave\administrator - that can set up and manage enterprise application definitions. This account must be a member of the same domain to which the single sign-on service account belongs.

11. Do not change any other setting on the Manage Server Settings for Single Sign-On page. Click on the OK button.

12. After you are returned to the Manage Settings for Single Sign-On for MOSS01, you will notice that you can configure other settings for the Single Sign-On service. Click on the Manage settings for enterprise application definitions link in the Enterprise Application Definition Settings section.

13. On the Manage Enterprise Application Definitions page, click on the New Item link.

14. On the Create Enterprise Application Definition, you will create an Application Definition file used by the Business Data Catalog (BDC) to connect to the AdventureWorksDW database.

15. Also, on the Create Enterprise Application Definition, you will configure the account type. In our scenario, we will use the Individual account type.

Note: In the event that you decide to use the Group – trainsbydave\domain users setting, the SQL database administrator must ensure the group account has permissions on the various databases.

16. Also, on the Create Enterprise Application Definition, you will configure the authentication type. In our scenario, we are using the Windows Authentication type.

17. Also on the Create Enterprise Application Definition, you will configure the Logon Account Information. In our scenario, we are accepting the default values. Click on the OK button.

18. On the Manage Enterprise Application Definitions, you will see the AdventureWorksDW SSO definition file.

19. Open the Windows Explorer application and navigate to the 2007 AdventureWorks Samples folder (C:\Program Files\2007 Office System Developer Resources\Samples\Business Data Catalog\AdventureWorks Samples)

20. Make a copy of the AdventureWorks2005DW.xml and AdventureWorks2000_SSO.xml files.

21. Open the AdventureWorks2005DW.xml file using SharePoint Designer 2007 or Visual Studio 2005. Once the AdventureWorks2005DW.xml is open, locate the RdbConnection Data Source property and set the property to MOSS01.

22. Next, open the AdventureWorks2000_SSO.xml file with SharePoint Designer 2007 or Visual Studio 2005.

23. Copy the Property elements for both, SSOApplicationID and SSOProviderImplementation from the AdventureWorks2000_SSO.xm. to AdventureWorks2005DW.xml after the RdbConnection Intergrated Security property. Verify that the Property elements are well formed and save the AdventureWorksDW.xml file. Close SharePoint Designer or Visual Studio 2005.

24. Navigate to the Central Administration site. On the Quick Launch Bar navigate to the Shared Services Service: SSP01 page.

25. Navigate to the Business Data Catalog section of the Shared Services Service: SSP01 page. Click on the Import Application Definition link. It will take you to the Import Application Definition page.

26. On the Import Application Definition page, click on the Browse button in the Application Definition section and browse to the location you saved the AdventureWorks2005DW.xml (:\Program Files\2007 Office System Developer Resources\Samples\Business Data Catalog\AdventureWorks Samples) file. Click on the Open button and verify the path.

27. Accept the default values for all other sections on the Import Application Definition page. Click on the Import button at the bottom of the page. A verification process status bar appears. Click on the OK button.

28. Next, you are taken to the View Application: AdventureWorksDW page. Click on the Manage Permissions link. It will take you to the Manage Permissions: AdventureWorksDW page. Click on the Add User/Groups link.

29. On the Add User/Groups page in the Choose Users section, add the trainsbydave\domain users group.

30. On the Add User/Groups page in the Choose permissions section, select all, four, permissions. Click on the Save button. You are taken back to the Manage Permissions: AdventureWorksDW page.

31. Select all users and groups on the Manage Permissions: AdventureWorksDW page. Click on Copy all permissions to descendants link. Click the OK button for the dialog box displayed.

Note: This option ensures that the permissions for the listed users and groups are on all Access Control Lists (ACLs) for each entity identified in the Application Definition file.

Note: Additional documentation will follow for demonstrations for, both, SharePoint Designer and Excel Services. If you are familiar with the existing Excel Services and Business Data Catalog (BDC) Web Parts, you can start using the BDC.