Issue with using openAM/openSSO and wrong FQDN on server

Hi,
Does anyone made a configuration with SSO and OpenAM.
I did some configuration according to document : oam90-cucm8586-cuc86-sso.pdf
A COMPLETE GUIDE FOR
THE INSTALLATION, CONFIGURATION, AND INTEGRATION OF
OPEN ACCESS MANAGER 9.0 WITH
CISCO UNIFIED COMMUNICATIONS MANAGER 8.5/8.6,
CISCO UNITY CONNECTION 8.6, AND ACTIVE
DIRECTORY FOR SINGLE SIGN-ON
But it looks like we have choosen the wrong server name when installing/configuring the openSSO software.
The server redirects to the server name instead of the FQDN.
This will cause an error when using 'utils sso enable', because the certificate is incorrect.
Error: Open Access Manager (OpenAM) not configured based on FQDN
I can find it on several places in the configuration, but don't know where to change.
We also removed the software (Java, Tomcat and openAM) but the configuration is still present.
We are using a windows server.
In documentation it says you have to remove the .openssocfg file somewhere but we can't find it.
any hints or help is much appreciated.
kind regards,
Jos de Bruin

I had this problem and fixed it. We were absolutely positive that the FQDN configuration on the OpenAM server was correct. Certainly verify that first on your server, but it's not the ONLY thing that throws this error.
Looking at the OpenAM debug logs set at the Message level in the Authentication file, I was able to see numerous failed authentication attempts for the "demo" user when I tried to enable SSO.
We had earlier removed the demo user because it shouldn't be really needed for any production OpenAM deployments.
We were wrong.
I added the demo user back to the OpenDJ embedded database "Access Control > Top Level Realm > Subjects" and then I was able to enable SSO on my CUCM server.
The UserID is "demo" the password is "changeit" and all fields are mandatory, even thought First Name doesn't always have the * that indicates it is mandatory.
Hopefully there will be either a documentation defect or a code defect coming out of this recent discovery.

Similar Messages

Issues with Using Data Dashboard and Using Web Service

After running a system for many months it has suddenly decided to not work at all. I am using Data Dashboard to read variables on a host. I'll outline the system here to get a baseline:
I'm running LV 2012 SP1 f5.
I collect data from one Ethernet port and interfact it to another Ethernet port to form a proxy.
I use a fixed IP address from my DSL along with port forwarding/port triggering in my router for data observation and control.
So, what have I done so far?
1. Repaired my original LV 2012 SP1 and tested system.
2. Upgraded to LV 2012 SP1 f5 and tested system.
3. Ran service.msc and checked all the NI services that should be operational. Started and stopped several of them and rebooted computer.
4. Deployed all my SVs (multiple times)
5. Disconnected second Ethernet interface becasue sometimes the variables would deploy to this IP address.
6. Turned off my wireless because sometimes the variables would deploy to this IP address.
7. Checked "Web Server Configuration" "Application Web Server" for correct port number.
8. Checked "Web Services Management" and under "Deployed Web Services" there is one category: SV is marked as running. NOTE!! WebService is NOT listed and this could be a problem
I can use the following to retrieve data&colon; localhost:<port number>/sv/variable. But when I substitute my DSL IP number, I can no longer get any data.
So, what am I missing?
Thanks,
Paul.

Siana,
Thanks for your response.
I haven't touched the NI code in months. It is running on an XP laptop and I have the Windows updates turned off. McAfee is running on it and of course that updates regularily. This laptop is a dedicated machine that I only use for this function, nothing else. I haven't added or subtracted any programs for many months.
There have been no changes to the DSL from me. AT&T is constantly trying to get us to upgrade to U-Verse but we have resisted. All DSL modem and router hardware is the same.
Confusing, huh?

Are there any issues with using OS X Mavericks and Premiere CC?

Are there any issues with using OS X Mavericks and Premiere CC?

Official statement: http://blogs.adobe.com/premierepro/2013/10/premiere-pro-and-mac-os-x-10-9-mavericks.html
Peter Garaway
Adobe
Premiere Pro

Issues with Global Address Book and Out of Office saying Exchange is Offline.

So we have an Exchange 2010 server that has been running fine for quite a few years. We recently changed our firewall to an ASA 5510 and created all the firewall rules necessary to have email work through it. Everything works fine so naturally we thought
everything was good to go.
Then I started getting messages that the Out of Office wasn't working an that when users where trying to set their away message they would get a message from outlook that the exchange server was unavailable, yet when I
check the outlook client it would say Connected to Microsoft Exchange at the bottom. I thought this was crazy so I started looking further into it and it turns out that the name for the server owa.xxxxxx.net points to a public address, which of course lives
on the outside interface to the ASA. In ASA world it doesn't like private space (ie. 192.168.x.x) talking to the outside interface and drops the packets, where our old firewall did not. So as a short term fix I had the users using OWA site with a internal
address to set their out of office message. This worked fine until today when I rebooted the email server and started getting support calls saying that when users where selecting the To: button in a new email that once again they were getting messages saying
that they were not connected to exchange, yet they once again outlook said they were. I then started playing with the host name owa.xxxxxx.net again. This time I changed the hosts file on a box and pointed the internal IP of the exchange server to that
host name. Restarted the outlook client and things started to work as they should. I have played with split DNS to see if this would help so I wouldn't have to do this with every client in the network, and it was promising until I realized that we many hosts
that use this domain and an external DNS server that takes care of these requests that now the internal users will never reach. Funny part is that if we take one of our laptops out side the network everything works fine as well.
So I'm guessing that some of the processes that connect Outlook to Exchange use the FQDN of the server or IP address, and that other things such as the Global Address Book and Out of Office use the External Host Name.
Any help to point these request at the Internal FQDN/IP would be great, or if someone can think of another way of dealing with this issue would be greatly appreciated.

Hi Titan,
correct me if i have missed something but are users able to look up contacts in GAL?
If you update (ex mobile number for a user) then run the following commands(one for each line):
Get-GlobalAddressList | update-GlobalAddressList
Get-AddressList | update-AddressList
Get-OfflineAddressBook | Update-OfflineAddressBook
Restart Your Outlook in 5 min,then do a manual OAB download.Is info on that user updated?
Does GAL from frm OWA?
if im not wrong,Status and Out of Office use EWS for status update.
Please run the following command:
Get-WebServicesVirtualDirectory -Identity “mailserver01\EWS (Default Web Site)” |fl *internalUrl*
where mailserver01 is the server that is having the issue.
Then please check if internal URL is correct for that server (and those that are having issues.
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you. Thank you! Off2work

Sync issues with iPhone 6 Plus and iTunes

I'm having issues with syncing my iPhone and iTunes.
I am running: Mavericks 10.9.3 | iTunes 11.4 | iOS 8.0.2
Every time I try to sync my iPhone 6 Plus with iTunes, the sync process gets stuck on step 5 of 5 (waiting for changes to be applied). The longest this has occurred for is 2hrs. After this time I have stopped the sync and ejected my iPhone.
I had another issue with my phone when playing music. When going to play music, I was given the error message saying that the song could not be found. I connected my iPhone to iTunes and went to the tab in summery page, 'on this iPhone'. I found the song and could see that next to the song was a small what looked like dotted grey circle. After Googling this, I found a video saying that if i was to remove all my music and then add it again, this should fix the problem with this song. I did this and this was when the issue occurred again.
I unticked the option to remove all music but the sync did not finish. So I cancelled the sync, ejected my iPhone and tried again. This time, the summery page of my iPhone said there was no music on my iPhone and the 'on this iPhone' tab, this all so said there was no music however, my music was still on my iPhone including the song that would not play. All played ok.
I have read lots in the Apple forums about lost of difference reason this may be happening. Things like bugs in iOS 8, app updates being transferred during the sync process, the latest iTunes version has bugs and even a dodgy USB cable could cause it. My iPod running iOS 5 syncs all ok but I get this problem as well on my iPad Air.
I all so had this issue with my old iPhone 4S. The problem occurred when running iOS 7 and 8 on the 4S. When I had it on the 4S, I did a restore of the 4S 4 times and thought I had found the issue down too a dodgy app. However, now that it has happened on my new iPhone and still not using that app, could this be an issue with my Mac/iTunes?
I am in contact with Apple Care, but this is such a long process.
So if anybody could please offer any advice on this or steps to try to maybe solve the issue, it would be really helpful. Or if anybody is experiencing the same problem, it would be good to know its not just my devices and Mac producing this sync problem.
I will update my post with any information provided by Apple Care as and when I get it.
Thanks for reading and thanks for your time.
Mark.

Hi,
Just wanted to updated my original post and give some more information on this issue that I'm having with my iOS devices running iOS 8.0.2 and iTunes 11.4.
Firstly I just want to updated my details about what version of Mavericks I'm running. I'm running 10.9.5 - I put the wrong version down in my original post.
So over the last week, I have had a few phone calls with Apple Care an am dealing with a senior technical advisor about this issue.
I have been given some instructions that I am currently working through to see if it solves the sync issue with iTunes and my iOS devices.
The Apple Care advisor has pointed out that a iTunes version issue with music that I have ripped to iTunes and the current iTunes version could be what is causing the problem. For example, every song that I have purchased from iTunes since having an account, I was told are all exactly the same the same when it comes down the to data/information about that track/album that iTunes stores with the music but when it comes to music that I have added to iTunes myself from a CD, this was added and encoded with the version of iTunes that was running at the time of adding the music. So going through all the music that I added to iTunes over the last 10 years, you can imaging that there was lots of mixed version of iTunes linked to lots of different music.
At the moment, I'm having to go through all my music and find any that I have added and create a new ACC version of that music and delete the old version. However, due to the amount of music that I have, this is going to take a long time. When I was on the phone to the Apple Care advisor, we did several albums as a test and they all synced over to my iPhone. This may just have been luck though at that time.
Now, I'm not saying that this will solve the problem that I have with the sync issue but I am going to try it and see how I get on. The only down side to this fix as far as I can see at the moment, is that when it's all done, I think I will have to fully restore all my iOS devices to get music on to them.
I will of course updated this topic when I have got through all my music and tried to sync my iOS devices.
Thank you all for your comments.

Issue with TableAdapter Configuration Wizard and CASE statements

I am having an issue with using any CASE statements in the select clause for the Table Adapter Configuration Wizard (TCW). I can take any query without a CASE and it will run fine, but inserting any CASE statement in the Select such as:
SELECT
(CASE WHEN :ras_sort = 'D' THEN TO_CHAR(a.TRANS_DATE,'YYYYMMDD')
WHEN :ras_sort = 'C' THEN c.CLAIMDEP_NAME
WHEN :ras_sort = 'A' THEN TO_CHAR(a.ACCOUNT_NUMBER)
END) sort1
FROM xxxx
causes the TCW to error with "error in list of function arguments, 'THEN' not recognized" and several other errors. I have tried with and without parameters in the CASE and have tried both forms of the CASE statement. I have tried multiple queries, all that run with no problem outside of TCW and ODP, but this seems to be a real issue
Is this a known problem and are there any workarounds that will allow use of the TCW?
Thanks,
Dave

Hi Ashish,
perhaps you launch the Web service wizard from the wrong location (i.e. not selecting the SEI you want to use). Did you strictly follow the steps described in the <a href="http://help.sap.com/saphelp_nwce10/helpdata/en/44/f36fa8fd1d41aae10000000a114a6b/frameset.htm">documentation</a> for creating the web service?

Any issues with using LDAP on LINUX for GRC 5.2 UME?

Our company is converting our LDAP servers from AIX to LINUX. The DNS name used in our UME connection should not change. Are there any issues with using LDAP on LINUX? We are currently on GRC 5.2 SP9 (in the middle of upgrading to SP12).
Also, I have been trying to connect our test UME system to a test LDAP box that has already been converted to LINUX but keep getting a 'connection failed' error when I try to test it.
Do you have to reboot the server to test changing the LDAP connections? I've been trying it by going into UME, pulling up the LDAP tab, hitting the Modify button, entering the new userid and password for test LDAP, and hitting the Test Connection button. I've verified that this userid and password is correct for test LDAP.
Is there a way to get more information about why the connection failed?
Thanks.

I've been told by our LDAP Support group that none of the other configuration settings should have to be changed. I should only have to change the id and password to connect to a test version of LDAP instead of our regular connection to the production LDAP.
Can you test a connection for a different userid/password without having to reboot/restart the server? Do I need to change these two settings, save then, reboot/restart, and then do the Test Connection button?
Thanks.

Issues with using relative links in Captivate 8

Is anyone else having issues with using relative links in Captivate 8? These links all used to work in the previous version of Captivate. And I could have sworn this was fixed already once in Captivate 8 but it's popping up again for us. Here is the situation... We have courses that are made up of multiple lessons which as separate Captivate files. Within those lessons are buttons to link to external documents (which live in a shared document folder), demonstrations, etc. We use relative links because we post these to our amazon servers and we also sell them to clients where they can post them on their own web servers or in their LMS. SO we can't put in full paths for the links or we'd have to change them constantly. So an example is that the link for a button might be "../Document/nameofdoc.pdf" This would be going to a user guide or something that is posted in the "Document" folder that lives at the same level as the lesson's folder. But now, all of the sudden, none of our bazillion links is working. And I've tried buttons, hyperlinks, and even the old click box. Nothing works with relative links. And I did check the permissions on every file and folder on our Amazon server to verify nothing changed there as well. Any suggestions?

I have the same issue with relative links using Captivate 8. I am trying to load Captivate modules into an LMS using relative links to document files within the LMS. The links work fine during a site page test so not an issue in the LMS, but from the Captivate module they aren't working....
Help?

Issues with using the output redirection character with newer NXOS versions?

Has anyone seen any issues with using the output redirection character with newer NXOS versions?
Am receiving "Error 0x40870004 while copying."
Simply copying a file from bootflash to tftp is ok.
This occurs for both 3CDaemon and Tftpd32 softwares.
Have tried it on multiple switches - same issue.
Any known bugs?
thanks!
The following is an example of bad (NXOS4.1.1b) and good (SANOS3.2.1a)
MDS2# sho ver | inc system
system:    version 4.1(1b)
system image file is:    bootflash:///m9200-s2ek9-mz.4.1.1b.bin
system compile time:     10/7/2008 13:00:00 [10/11/2008 09:52:55]
MDS2# sh int br > tftp://10.73.54.194
Trying to connect to tftp server......
Connection to server Established. Copying Started.....
TFTP put operation failed:Access violation
Error 0x40870004 while copying tftp://10.73.54.194/
MDS2# copy bootflash:cpu_logfile tftp://10.73.54.194
Trying to connect to tftp server......
Connection to server Established. Copying Started.....
|
TFTP put operation was successful
MDS2#
ck-ci9216-001# sho ver | inc system
system:    version 3.2(1a)
system image file is:    bootflash:/m9200-ek9-mz.3.2.1a.bin
system compile time:     9/25/2007 18:00:00 [10/06/2007 06:46:51]
ck-ci9216-001# sh int br > tftp://10.73.54.194
Trying to connect to tftp server......
|
TFTP put operation was successful

Please check with new version of TFTPD 32 server. The error may be due to older version of TFPT server, the new version available solved this error. Files are getting uploaded with no issues.
1. Download tftpd32b.zip from:
http://tftpd32.jounin.net/tftpd32_download.html
2. Copy the tftpd32b.zip file into an empty directory and extract it.
3. Copy the file you want to transver into the directory containing tftpd32.exe.
4. Run tftpd32.exe from that directory. The "Base Directory" field should show the path to the directory containing the file you want to transfer.
At this point, the tftpserver is ready to begin serving files. As devices request files, the main tftpd32 window will log the requests.
Best Regards...

Is there an issue with Safari in Iphones and Ipads where it does not recognize option disabled="disabled" tag properly?

Greetings everybody,
I have run into a peculiar problem with the Safari browser on mobile platforms (IPad, IPod, IPhone) which I hope I can find a solution for in this community.
I just launched a new website where I sell products with certain variations, for example please view this link: http://www.finerribbon.com/aegean-single-face-satin-ribbon.html
On this particular product, the product variants are supposed to work in such a way where:
If you select the value "1/8" from the "Choose Ribbon Width" field
THEN
The only options active and available to choose from in the "Choose Roll Size" field should be: 500 Yds, 20 Yds & Sample Swatch
Now, if we browse to the above link in Safari using a desktop or a laptop, there are no problems at all, but if we browse to the above link using an IPhone or an Ipad, then we have a problem where all the options are available regardless of the values chosen, basically the above functonality does not work.
I was told that there an issue with Safari in Iphones and Ipads where it does not recognize option disabled="disabled" tag properly, is this true? Can anyone advise me if there is a solution to this problem? I would sincerely apperciate it.
Thank you very much for your time and help!

Hi...
I have run into a peculiar problem with the Safari browser on mobile platforms (IPad, IPod, IPhone) which I hope I can find a solution for in this community.
Now, if we browse to the above link in Safari using a desktop or a laptop, there are no problems at all, but if we browse to the above link using an IPhone or an Ipad, then we have a problem
At the top of this window you'll see the following:
Apple Support Communities > Mac OS & System Software > Safari > Discussions
This the Safari forum for the Mac OS X.
Better that you post your topic here > Developer Forums: Apple Support Communities
I do see on my iPad what you are rreferring to. But you shoudl get the feedback you need in the developer forum.

HR ABAP: Issue with using 'nocommit' parameter on FM HR_INFOTYPE_OPERATION

Issue with using nocommit parameter on FM HR_INFOTYPE_OPERATION:
My client has a requirement to create the following 4 infotypes in sequence in a LUW, i.e either all are created or none is created.
9045 (custom infotype)
0045
0078
0015
I tried to use the nocommit parameter on FM HR_INFOTYPE_OPERATION to insert the 4 infotypes
in a nocoomit mode and then at the end I have issued
'Commit Work', but to my surprise only I/T 0015 is created in the database and the first three (9045, 0045 and 0078) did not make it to database.
I searched many threads on SDN but could not find a solution.
Please let me know if there could be any solution to implement the LUW.
YOur inputs will be appreciated.

Hi ,
i think u can also try with this FM HR_MAINTAIN_MASTERDATA , see its documentations.
no commit works like a simulation mode , what u can do is ,
call FM for all Infotypes and collect all error msgs if any , then finally call FM for all infotypes again without passing nocommit work ( i.e space).
regards
prabhu

I have been having issues with not receiving texts and voicemails daily, for a few months now. If I turn the phone completely off, when I turn it back on the messages will flood in from hours before. I can't be continually turning off my phone in case som

I have been having issues with not receiving texts and voicemails daily, for a few months now. If I turn the phone completely off, when I turn it back on the messages will flood in from hours before. I can't be continually turning off my phone in case someone left me a message. How do I resolve this issue?

Wifi: my Cell phone will remember 10 wifi connections. So delete any you don't use often and your home wifi and try to enter home wifi again.
if it still won't connect to home wifi, call your internet provider for help. You may need a newer router or different settings Or upgraded service. Your phone seeks the best connection and will refuse lesser connections.
last resort. Backup the phone. Do a full reset, then restore as new with the backup.
if still not fixed, go back to apple and insist on repair or replacement.
HOWEVER. voicemail is not a wifi issue, it's a carrier function, which is why the SIM card is a suspect.

Issues with Bex query structures and Crystal Reports/Webi

Hi experts,
I'm having an issue with Bex Query structures and nulls. I've built a Crystal Report against a Bex query that uses a Bex Query structure. The structure looks like the following
Budget $
Budget %
Actual $
Actual %
Budget YTD
etc
if I drag the structure into the Crystal Report detail section with a key figure it displays like this
Budget $     <null>
Budget %     <null>
Actual $     300
Actual %     85
Budget YTD     250
the null values are displayed (and this is what is required). However if I filter using a Record selection or group on a profit centre then the nulls along with the associated structure component are not displayed.
Actual $     300
Actual %     85
Budget YTD     250
Webi is also behaving similarly. Can anyone explain why the above is happening and suggest a solution either on the Bex side of things or on the Crystal Reports side of things? I'm confused as to why nulls are displayed in the first example and not the second.
Business Objects Edge 3.1 SP2
SAP Int Kit SP2
OS: Linux
BW 701 Level 6
Crystal Reports 2008 V1
Thanks
Keith

Hi,
Crystal Reports and Web Intelligence will only show data which is in the cube. You could have an actual 0 or Null entry whithout grouping but by changing the selection / grouping in the report the data does not include such entry anymore.
ingo

Performance issue with using buffering in a APPL0 or APPL1 Table

Hi,
Can anyone please tell me whether there's any serious performace issue with using buffering for a Master or Transaction table? I'm asking this because when I run code inspector for my transp table I'm getting information message:
Message Code 0011 ==> Buffereing is Activated but Delivery Class Is "A" and Message Code 0014 ==> Buffereing is Activated but Data Class Is "APPL1".
So what's other way round for improving performance.
Thanks,
Mahesh M.S.

Hi,
have you read the documentation?
Let me paste it here for you:
Buffering is switched on for the examined table and it has data type 'APPL0' or 'APPL1'.
Tables with data type 'APPL0' or 'APPL1' should contain master or transaction data, so these tables should either contain a large amount of data or their content should change frequently. Therefore buffering the table is unfavourable. Very large tables suppress other tables in the buffer memory and hence slow done any access to them. Transaction data should not be buffered because the synchronization of the changes on the various application servers is very time consuming.
In exceptional cases, small master data tables ('APPL0', size category 0) can be buffered.
The solution depends on the table content. If it is master or transaction data, the table should not be buffered. If the table content does not consist of master or transaction data, the data type should be corrected accordingly.
This should answer your questions...
Kind regards,
Hermann

Licensing issue by using Applications AC and PC

Hi,
The SAP GRC 10.0 solution comes as bundled solution for AC, PC and RM. While downloading the SAP GRC 10.0 all the three components are downloaded but in a dormant state.
With the release of GRC 10.0, Access Control and Process Control are offered as an integrated solution, both at the data layer and at the user interface layer. This new unified platform enables increased harmonization of key master data.
GRC 10.0 is a harmonized platform. Although maintenance of data within AC and PC is similar in 10.0 as it was in previous releases, there are some key differences. The following master data is shared between AC and PC for the release 10.0 integration scenario.
u2022 Organizations
u2022 Business Processes
u2022 Business Subprocesses
u2022 Controls
SAP GRC System Add-ons:
Access Control, Process Control and Risk Management are contained in one ABAP add-on u201CGRCFND_Au201D
SAP Backend System Plug-ins:
A. GRCPINW: NW Function Modules hold the AC functions for ERP systems without HR (former non-HR RTA)
B. GRCPIERP: PC relevant features are contained in the plug-in GRCPIERP, for example, for running automated controls and the HR relevant functions for AC (former HR RTA)
There are multiple activation points for AC, PC and RM:
u2022 SAP GRC SPRO -> activate the Application. However
u2022 When we go for the Plug-ins (GRCPIERP) installation in backend systems with HR function module it also brings in the PC relevant features.
u2022 Mitigating Control definition based on Organizations
I had activated the Application AC and PC for some time assuming that PC is required to create the Mitigation Control and Organizations. However I just realized that Mitigating Control and Organization can be created even without Activating PC, which does nothing but removes the additional features of PC.
My Query:
u2022 Kindly let me know if I can still use PC to create and assign Mitigating Control as a shared resource for AC and PC or I have violated Licensing issue by using Applications AC and PC when I am supposed to use just Access Control.
u2022 How is shared resources in SAP GRC 10 dealt in terms of Licensing of Applications in SAP GRC 10.
Thanking you in advance.

all the new pc's we've purchased for a time now, don't have a Win7 CoA product key attached, even though they come with Win7 downgrade rights, so your strategy to use the CoA pkeys for the Win7 install on the new machines might be flawed.
We don't buy HP, and I'm in Australia, so I'm not sure if this will be the same for you.
Also, the OEM image that you would use to re-deploy/re-image with, may need to be different for varying models (OEMs might include different drivers, or other checks or blockers, in their image and OOBE scripts), and, the embedded OEM "master" product key/certificate
could vary (or not align) across model types/generations.
Ours do have the SLIC table in firmware and the OA markers, and we use VL Win7 Enterprise anyway, so our 40,000 machine fleet means VL and Software Assurance as a part of our EA + Select is an (expensive) no-brainer really.
The other thought I have for you, is the re-imaging rights that are bestowed when you have a VL agreement (and therefore, are not bestowed if you don't have one). Because we do have a VL agreement, I've never dived into how it might be worked if we didn't
have VL.
http://www.microsoft.com/licensing/about-licensing/briefs/reimaging.aspx
http://www.microsoft.com/licensing/about-licensing/briefs/downgrade-rights.aspx
If you do look at a VL agreement, I'm told they start from as few as 5 machines. And, if you purchase new pc's, you have the option to enrol the new pc's into Software
Assurance within 90days of purchase, which I imagine would save you some cost, compared to attaching SA to them at a later time, presumably requiring you to pay full ticket price for that.
I'd recommend you get some advice from an MS reseller, even if only to work out what the various options/costs might be.
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Issue with using openAM/openSSO and wrong FQDN on server

Similar Messages

Maybe you are looking for