You can use either the MMC Snap-in or the command line management utility (ssomanage) to manage the SSO system. This includes activities such as updating the SSO database, adding, deleting, and managing applications, and administering user mappings.

Only Single Sign-On Administrators can perform these tasks.