Is it possible to have all computers on SSO except for a couple? If so, how would you set that up?
You could set up a new epicor app server on EAC that points to the same db but has different auth. protocols.
To add to Aaron’s point, using Windows Binding makes it inherently SSO. The user logged into the workstation is used to select the E10 user account to use when the client is launched.
But then you must set the Domain and Domain User ID fields in User Security (in E10).
This what we do. Works well. We have custom install scripts that installs the appropriate environment based on user.
The term “app server” always scared me. It finally dawned on me the other day what this means. It’s not hardware. It’s another instance in the admin console as Aaron said. In my pic here, the green icons (because it’s in test) are the two app servers. One is SSL binding (to allow external access) and the other is Windows binding for SSO.
I actually have both clients installed in separate folders on my laptop so I can log into either.
I loathe the fact that “App Server” can mean either the physical hardware that EAC runs on, or an instance of an application served out by said hardware.
Ditto for “environment” I often use that instead of “App server”, when trying to distinguish between the PROD App and the TEST App, both running on the same box. For us, the TEST environment refers to the TEST App. While for others, Test environment may refer to an entirely different box, running its own O/S, EAC and APP servers.
And now, the term “box” isn’t well defined. It used to mean a specific computer running one O/S. Now it can be used to refer to a VM instance running on shared hardware.
[ gets down off of soapbox ]