How to configure SSO for another server in the DMZ

Document ID : KB000111888
Last Modified Date : 22/08/2018
Show Technical Document Details
Introduction:
Service Catalog is configured with single sign on regarding the main server. 
Now we plan to install a secondary in the DMZ for our customers. 
Is it possible to configure only this additional server without single sign on?
Question:
Service Catalog is configured with single sign on regarding the main server. 
Now we plan to install a secondary in the DMZ for our customers. 
Is it possible to configure only this additional server without single sign on?
Environment:
Windows
Answer:
When SSO is enabled (or not), it is registered as such in the mdb database.
It can be verified by executing this SQL query: 
select * from usm_configuration where group_name like '%sso%'

And then check for the value of the name-column where name='enablesso'.
The value field was as 2, mean ing SSO is ON. (0 means OFF).

As shown, the 'SSO ON/OFF' setting is stored in the mdb.
And there is only one mdb being used for all CA Service Catalog(SC) installations.
Which means that ALL or NONE will make use of the SSO feature.

Unless you have a completely/fully separated new SC installation.
With separate mdb and EEM, then it would be possible to get you a non-SSO Catalog server.