Create New Affiliate Application Wizard: Accounts

Create New Affiliate Application Wizard: Accounts


Specify the access accounts for the new Affiliate Application. You can specify one or more accounts for both Application Administrators and Application Users.


In certain Workgroup environments, clicking the Browse button will cause this screen to close. Instead of using the Browse button, simply type the name of the required accounts in the box.

For group type Affiliate Applications, it is important to note that when specifying multiple accounts for Application Users, the way in which the accounts are ordered is very important. This is because different ordering of accounts can result in different credentials being returned, which could potentially result in an authentication failure.

For example, UserA could be a member of two groups: Group1 and Group2. Each of these groups could in turn be mapped to an account as follows:

  • Group1 is mapped to ExternalCredentials1

  • Group2 is mapped to ExternalCredentials2

If the order specified for 'Application Users' is Group1;Group2, then when the credentials are requested for UserA, SSO returns ExternalCredentials1.

However, if the order specified for 'Application Users' is Group2;Group1, then SSO returns ExternalCredentials2.

Application Administrators

The Windows account(s) that will manage this Affiliate Application.

Application Users

The Windows account(s) for which mappings can be created.

Community Additions

© 2016 Microsoft