BizTalk server 2020. Enterprise SSO configuration failed with error, Could not find the account name 'SSO Administrators' on computer 'SRV***'

Question

While configuring Enterprise SSO using BizTalk server configuration, after providing server name it was throwing a below error.

TITLE: Microsoft BizTalk Server Configuration Wizard

------------------------------

Could not find the account name 'SSO Administrators' on computer 'SRV***'. Configuration can proceed, but it might fail. (SSO)

For help, click: http://go.microsoft.com/fwlink/events.asp?ProdName=Microsoft+BizTalk+Server&ProdVer=3.13.717.0&EvtSrc=SSO&EvtID

------------------------------

ADDITIONAL INFORMATION:

(0x800706BA) The RPC server is unavailable.
(Win32)

For help, click: http://go.microsoft.com/fwlink/events.asp?ProdName=Microsoft+BizTalk+Server&ProdVer=3.13.717.0&EvtSrc=Win32&EvtID

Answer 1

You need to create the groups and users before you install BizTalk & SSO, depending on what features you are installing.

See Windows Groups and User Accounts in BizTalk Server and also Permissions Required for Deploying and Managing a BizTalk Application

Below are the Groups and Users you might need. Note: The naming should be to whatever naming conventions that are used at your company.

Groups

• SSO Administrators
• SSO Affiliate Administrators
• BizTalk Server Administrators
• BizTalk Server Operators
• BizTalk Server Read Only Users
• BizTalk Application Users
• BizTalk Isolated Host Users
• BAM Portal Users
• BizTalk SharePoint Adapter Enabled Hosts
• BizTalk B2B Operators Group

User and service accounts

• Enterprise Single Sign-On Service
• BizTalk Host Instance Account
• BizTalk Isolated Host Instance Account
• Rule Engine Update Service
• BAM Notification Services User
• BAM Management Web Service User
• BAM Application Pool Account

Not listed on those pages, but very important is the BizTalk Installer account that basically has highest privileges,e.g. local admin on the BizTalk server and sysadmin on the database server as it will be creating the BizTalk databases and assigning the rights to the accounts in the database.