Microsoft Single Sign-On Service (ssosrv) solution for failing to retrieve users

1. When saving "server settings for managing a single Logon", you are prompted that you do not have the required permissions.

It is best to use the domain \ Administrator Account to start the SSO service.

2. When defining an account in "manage account information defined by enterprise applications", the system prompts "incorrect account input. Please enter the account in domain \ User format"

Most of the reasons are that when you create an enterprise application definition in "manage enterprise application Definitions", you select "group ". if you want to set different enterprise application-defined account information for each user, select "personal ".

3. An error occurred while creating the encryption key or a prompt in the log

"Microsoft Single Sign-On Service (ssosrv) fails to retrieve creden。 defined by the user bocoits \ administrator and enterprise application Gmail. The returned error is 0x80630001. For more information, see Microsoft SharePoint product and technical software development kit (SDK ). "

Possible solutions:

(1) Windows Installer mistakenly inserts extra quotation marks (") in the ImagePath key value of the following registry sub-Keys (").
HKEY_LOCAL_MACHINE \ SYSTEM \ controlset001 \ Services \ ssosrv

Solution: Open the registry and find the ImagePath to modify it. Remove the quotation marks at both ends of the numeric data
X: \ Program Files \ common files \ microsoft shared \ microsoft Single Sign-On \ ssosrv. exe
Refresh the registry and restart the ssosvr service.

(2) re-generate an encryption key and make sure that the account is marked

(3) check whether there is a database owner in SQL Server, the specific method can refer to http://www.msotec.com/topic.aspx? Topicid = 351