Upgrade MOSS 2007 SSO to Enterprise SSO

Actually SSO is a core feature of Windows Server.  MOSS 2007 includes Enterprise SSO in the Enterprise version to connect to BDC's and external data connections.

We are running MOSS 2007 Enterprise and it is definatly not running Enterprise SSO. It's running a striped down SSO which does not have any of the Ent SSO management tools or external connecters.

I have not seen any documentation indicating that the MOSS 2007 ships with Ent SSO.

My information was based on this slide and some others I have seen at Microsoft.

http://download.microsoft.com/download/b/9/a/b9ab6c00-dc8a-43a6-b4f2-50566789fb23/MOSS_Overview_Momentum_Nov2007.ppt

To be clear, MOSS 2007 doesn't appear to be a replacement for Enterprise SSO, my impression is that you can achieve the same results.  You are correct, they probably did strip it down so it doesn't have the management UI.

I see where that slide show says "enterprise SSO". I'm not sure it's accurate though. I can't find an MIIS / ILM or PCNS connector for the MOSS 2007 SSO. I can't really find much in the way of documentation on MOSS 2007 SSO at all besides the standard configuration document and management through Sharpoint Central Admin, which is all of about 4 configuration items (on or off)

I'm now suspecting that slide isn't accurate.  It probably has the core functionality but minus the complete feature set and management tools.  I've managed to get MOSS SSO working with Oracle but it was a bit of a challenge.

However, Sharepoint seems to use the SSO API so my gut instinct is that if you installed Enterprise SSO, sharepoint would simply use it.  However I can't seem to find any literature that confirms that hypothesis.

When I try to install ent SSO over my existing MOSS 2007 SSO it does not recognize the existing database and wants to create a new one. I have sort of abandoned the Ent SSO idea wnd started working with the Microsoft.SharePoint.Portal.SingleSignOn API. I have written a .Net windows form application which will let me set the user credentials in SSO, HOWEVER, I can't get the same code to run as a web-service (which is what I will need). When the web service runs it throws an SSO Exception.

Have you read any articles about how to write custom web services for Sharepoint?

Can't say that I have.

Here is the method which sets the SSO credentials
using Microsoft.SharePoint.Portal.SingleSignon;

string strFullUsername = strDomain + "\\" + strUsername;
Credentials.SetUserCredentials(strApplication, strFullUsername, new object[] { strUsername, strPass });

Here is the error:

SingleSignonException caught.
Exception Code: 0x8062ffff
Source: Microsoft.SharePoint.Portal.SingleSignon
MethodName: Check
Message: A call into SPS Single Sign-on failed. The error code returned was '-2140995585'.

at this point I would award point to anyone who could tell me exactly what this error is, because Microsoft doesn't document this method.

it looks like the Exception is actually being thrown by

Microsoft.SharePoint.Portal.SingleSignon.SSOCanaryChecker.Check()

Still not sure what the error code is though.

So it seems that SetUserCredentials() is only allowed to be called on PostBack or the Canary Checker will get upset. Getting closer I guess. How to emulate a postback programattically in my webservice?

Sometimes the correct answer is "It's not possible" or there isn't a solution.