Completing the configurations for network authentication service and EIM on System B and System C

Although the Synchronize Functions wizard propagates most of the configuration that you need for a single signon environment, you still need to perform some additional tasks to complete your single signon configuration using iSeries™ Navigator for System B and System C.

These are the tasks you need to perform on System B and System C, depending on how you designed your single signon environment:

1. Add i5/OS^® service principals to the Kerberos server.

2. Create a home directory for each of your users.

3. Test network authentication service.

4. Create EIM identifiers for your users.

5. Create source associations and target associations for the EIM identifiers.

6. (Optional) Create policy associations.

7. (Optional) Enable the registries to participate in lookup operations and to use the policy associations.

8. Test the EIM mappings.

9. (Optional) Configure System Access for Windows^® applications to use Kerberos.

10. Verify network authentication service and EIM configuration.

Use the Scenario: Enabling single signon for i5/OS scenario as a guide as you complete the configurations on System B and System C. This scenario provides step-by-step instructions for completing all the tasks required for single signon.

You have now completed the tasks required to propagate the EIM and network authentication service configurations from System A to System B and System C.

Parent topic: