Specific cases

In this section, we cover cases other than the setup of a single firewall in a single authentication domain with a single SN SSO Agent.

Multiple firewalls managing the same authentication domain

Several firewalls managing the same authentication domain can log in to the same SN SSO Agent.

Single firewall managing several authentication domains

Whenever a firewall manages several authentication domains, regardless of whether they are non-Microsoft LDAP directories and/or Active Directories, an SN SSO Agent must be dedicated to each domain. Each firewall can manage up to five SN SSO Agents, therefore up to five different authentication domains.

For more information on installation with a Microsoft Active Directory type of authentication domain, refer to the technical note Stormshield Network SSO Agent pour Windows.

The following illustration shows a firewall managing two authentication domains that are non-Microsoft LDAP directories.