SSO Agent Server RODC

Pippo

Hi , does the SSO agent work if installed on a server with RODC role?

Zyxel_Cooldia

Hi @Pippo,

When user login domain, it will generate security events (ID:4768) on domain controllers and SSO Agent get local domain controller security events log directly. 

It works on RODC as long as RODC have windows user login event 4768 and be able to get the groups information of users via LDAP.

Pippo

@Zyxel_Cooldia so you confirm me that the agent in the rodc domain environment can work? 

Zyxel_Cooldia

Hi @Pippo,

When user login domain, it will generate security events (ID:4768) on domain controllers and SSO Agent get local domain controller security events log directly. 

It works on RODC as long as RODC have windows user login event 4768 and be able to get the groups information of users via LDAP.

Pippo

@Zyxel_Cooldia so you confirm me that the agent in the rodc domain environment can work? 

jasailafan

It’s highly related to Windows AD setting. 

Written permission for SSO agent is not required, as long as SSO agent can get security event and groups information of users.