FIX: You cannot add more than 100 groups to the ENTSSO Application Users group for an affiliate application

Symptoms

When you try to add a user or Windows group to the Application Users group for an affiliate application in the Enterprise Single Sign-On (ENTSSO) service, you may experience one or more of the following symptoms:
  • The Add button is not available in the SSO Administration snap-in.
  • When you use the Ssomanage.exe command prompt utility, you receive an error message that resembles the following:

    ERROR: 0x80070057: The parameter is incorrect.
Note ENTSSO is included with the products that are listed in the "Applies to" section.

Cause

This issue may occur if one or more of the following conditions are true:
  • The number of accounts in an ENTSSO group would exceed 100 if you were to successfully add the user or group.
  • The cumulative number of characters in account names would exceed 1024 if you were to successfully add the user or group.

Resolution

A supported hotfix is now available from Microsoft. However, it is intended to correct only the problem that is described in this article. Apply it only to systems that are experiencing this specific problem. This hotfix may receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next service pack that contains this hotfix.

To resolve this problem immediately, contact Microsoft Customer Support Services to obtain the hotfix. For a complete list of Microsoft Customer Support Services telephone numbers and information about support costs, visit the following Microsoft website:Note In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The usual support costs will apply to additional support questions and issues that do not qualify for the specific update in question.

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Enterprise Single Sign-On V4, x86

File nameFile versionFile sizeDateTimePlatform
Entsso.exe6.0.305.263,31228-Jan-201121:17x86
Importexport.dll6.0.305.251,54428-Jan-201121:17x86
Infocache.dll6.0.305.2125,27228-Jan-201121:17x86
Microsoft.enterprisesinglesignon.ui2.dll6.0.305.22,140,04028-Jan-201121:17x86
Ssoadmin.dll6.0.305.290,96028-Jan-201121:17x86
Ssoadminserver.dll6.0.305.2116,57628-Jan-201121:17x86
Ssoclient.exe6.0.305.254,61628-Jan-201121:17x86
Ssoconfig.exe6.0.305.280,21628-Jan-201121:17x86
Ssoconfigom.dll6.0.305.2115,03228-Jan-201121:17x86
Ssoconfigstore.dll6.0.305.277,66428-Jan-201121:17x86
Ssocsserver.dll6.0.305.268,95228-Jan-201121:17x86
Ssocstx.dll6.0.305.254,09628-Jan-201121:17x86
Ssolookup.dll6.0.305.294,04028-Jan-201121:17x86
Ssolookupserver.dll6.0.305.2121,18428-Jan-201121:17x86
Ssomanage.exe6.0.305.293,01628-Jan-201121:17x86
Ssomapper.dll6.0.305.2101,20828-Jan-201121:17x86
Ssomappingserver.dll6.0.305.294,56028-Jan-201121:17x86
Ssops.exe6.0.305.281,74428-Jan-201121:17x86
Ssopsadmin.dll6.0.305.282,26428-Jan-201121:17x86
Ssopshelper.dll6.0.305.285,84828-Jan-201121:17x86
Ssopsserver.dll6.0.305.2175,44828-Jan-201121:17x86
Ssoservercfg.dll6.0.305.2165,72028-Jan-201121:17x86
Ssosql.dll6.0.305.267,40828-Jan-201121:17x86
Ssoss.dll6.0.305.2104,78428-Jan-201121:17x86
Ssox7.sqlNot Applicable3,45701-Feb-201103:13Not Applicable
Enterprise Single Sign-On V4, x64

File nameFile versionFile sizeDateTimePlatform
Entsso.exe6.0.305.263,31228-Jan-201121:17x86
Importexport.dll6.0.305.251,54428-Jan-201121:17x86
Infocache.dll6.0.305.2125,27228-Jan-201121:17x86
Microsoft.enterprisesinglesignon.ui2.dll6.0.305.22,140,04028-Jan-201121:17x86
Ssoadmin.dll6.0.305.290,96028-Jan-201121:17x86
Ssoadminserver.dll6.0.305.2116,57628-Jan-201121:17x86
Ssoclient.exe6.0.305.254,61628-Jan-201121:17x86
Ssoconfig.exe6.0.305.280,21628-Jan-201121:17x86
Ssoconfigom.dll6.0.305.2115,03228-Jan-201121:17x86
Ssoconfigstore.dll6.0.305.277,66428-Jan-201121:17x86
Ssocsserver.dll6.0.305.268,95228-Jan-201121:17x86
Ssocstx.dll6.0.305.254,09628-Jan-201121:17x86
Ssolookup.dll6.0.305.294,04028-Jan-201121:17x86
Ssolookupserver.dll6.0.305.2121,18428-Jan-201121:17x86
Ssomanage.exe6.0.305.293,01628-Jan-201121:17x86
Ssomapper.dll6.0.305.2101,20828-Jan-201121:17x86
Ssomappingserver.dll6.0.305.294,56028-Jan-201121:17x86
Ssops.exe6.0.305.281,74428-Jan-201121:17x86
Ssopsadmin.dll6.0.305.282,26428-Jan-201121:17x86
Ssopshelper.dll6.0.305.285,84828-Jan-201121:17x86
Ssopsserver.dll6.0.305.2175,44828-Jan-201121:17x86
Ssoservercfg.dll6.0.305.2165,72028-Jan-201121:17x86
Ssosql.dll6.0.305.267,40828-Jan-201121:17x86
Ssoss.dll6.0.305.2104,78428-Jan-201121:17x86
Ssox7.sqlNot Applicable3,45701-Feb-201103:13Not Applicable
Entsso.exe6.0.305.295,05628-Jan-201121:16x64
Importexport.dll6.0.305.273,04828-Jan-201121:16x64
Infocache.dll6.0.305.2205,14428-Jan-201121:16x64
Microsoft.enterprisesinglesignon.ui2.dll6.0.305.22,140,04028-Jan-201121:17x86
Ssoadmin.dll6.0.305.2122,19228-Jan-201121:16x64
Ssoadminserver.dll6.0.305.2192,86428-Jan-201121:16x64
Ssoclient.exe6.0.305.282,26428-Jan-201121:16x64
Ssoconfig.exe6.0.305.2130,90428-Jan-201121:16x64
Ssoconfigom.dll6.0.305.2169,81628-Jan-201121:16x64
Ssoconfigstore.dll6.0.305.2103,77628-Jan-201121:16x64
Ssocsserver.dll6.0.305.296,60028-Jan-201121:16x64
Ssocstx.dll6.0.305.266,38428-Jan-201121:17x64
Ssolookup.dll6.0.305.2137,04828-Jan-201121:16x64
Ssolookupserver.dll6.0.305.2188,25628-Jan-201121:16x64
Ssomanage.exe6.0.305.2154,96828-Jan-201121:16x64
Ssomapper.dll6.0.305.2140,63228-Jan-201121:16x64
Ssomappingserver.dll6.0.305.2146,78428-Jan-201121:16x64
Ssops.exe6.0.305.2133,96828-Jan-201121:16x64
Ssopsadmin.dll6.0.305.2107,86428-Jan-201121:16x64
Ssopshelper.dll6.0.305.2113,49628-Jan-201121:16x64
Ssopsserver.dll6.0.305.2292,18428-Jan-201121:16x64
Ssoservercfg.dll6.0.305.2165,72028-Jan-201121:16x86
Ssosql.dll6.0.305.267,40828-Jan-201121:16x86
Ssoss.dll6.0.305.2165,71228-Jan-201121:16x64


Enterprise Single Sign-On V4.5, x86
File nameFile versionFile sizeDateTimePlatform
Entsso.exe6.0.4710.280,53630-Jul-201318:54x86
Importexport.dll6.0.4710.268,25630-Jul-201318:54x86
Infocache.dll6.0.4710.2137,88030-Jul-201318:54x86
Microsoft.enterprisesinglesignon.managementagent.dll6.0.4710.268,33630-Jul-201318:55x86
Microsoft.enterprisesinglesignon.ui2.dll6.0.4710.2846,54430-Jul-201318:54x86
Ssoadmin.dll6.0.4710.2101,01630-Jul-201318:54x86
Ssoadminserver.dll6.0.4710.2129,70430-Jul-201318:54x86
Ssoclient.exe6.0.4710.272,34430-Jul-201318:54x86
Ssoconfig.exe6.0.4710.2101,01630-Jul-201318:54x86
Ssoconfigom.dll6.0.4710.2129,69630-Jul-201318:54x86
Ssoconfigstore.dll6.0.4710.292,84030-Jul-201318:54x86
Ssocsserver.dll6.0.4710.280,54430-Jul-201318:54x86
Ssocstx.dll6.0.4710.268,24830-Jul-201318:54x86
Ssolookup.dll6.0.4710.2105,11230-Jul-201318:54x86
Ssolookupserver.dll6.0.4710.2133,80030-Jul-201318:54x86
Ssomanage.exe6.0.4710.2113,30430-Jul-201318:54x86
Ssomapper.dll6.0.4710.2117,40030-Jul-201318:54x86
Ssomappingserver.dll6.0.4710.2109,22430-Jul-201318:54x86
Ssomessage.dll6.0.4710.2133,79230-Jul-201318:54x86
Ssops.exe6.0.4710.2101,00830-Jul-201318:54x86
Ssopsadmin.dll6.0.4710.296,92830-Jul-201318:54x86
Ssopshelper.dll6.0.4710.2101,02430-Jul-201318:54x86
Ssopsserver.dll6.0.4710.2191,13630-Jul-201318:54x86
Ssoservercfg.dll6.0.4710.2182,94430-Jul-201318:54x86
Ssosql.dll6.0.4710.268,24830-Jul-201318:54x86
Ssoss.dll6.0.4710.2117,39230-Jul-201318:54x86
Ssox6.sqlNot Applicable22,65718-Jul-201301:44Not Applicable
Ssox7.sqlNot Applicable3,99518-Jul-201301:44Not Applicable
Enterprise Single Sign-On V4.5, x64
File nameFile versionFile sizeDateTimePlatform
Entsso.exe6.0.4710.280,53630-Jul-201318:59x86
Importexport.dll6.0.4710.268,25630-Jul-201318:59x86
Infocache.dll6.0.4710.2137,88030-Jul-201318:59x86
Microsoft.enterprisesinglesignon.managementagent.dll6.0.4710.268,33630-Jul-201318:59x86
Microsoft.enterprisesinglesignon.ui2.dll6.0.4710.2846,54430-Jul-201318:59x86
Ssoadmin.dll6.0.4710.2101,01630-Jul-201318:59x86
Ssoadminserver.dll6.0.4710.2129,70430-Jul-201318:59x86
Ssoclient.exe6.0.4710.272,34430-Jul-201318:59x86
Ssoconfig.exe6.0.4710.2101,01630-Jul-201318:59x86
Ssoconfigom.dll6.0.4710.2129,69630-Jul-201318:59x86
Ssoconfigstore.dll6.0.4710.292,84030-Jul-201318:59x86
Ssocsserver.dll6.0.4710.280,54430-Jul-201318:59x86
Ssocstx.dll6.0.4710.268,24830-Jul-201318:59x86
Ssolookup.dll6.0.4710.2105,11230-Jul-201318:59x86
Ssolookupserver.dll6.0.4710.2133,80030-Jul-201318:59x86
Ssomanage.exe6.0.4710.2113,30430-Jul-201318:59x86
Ssomapper.dll6.0.4710.2117,40030-Jul-201318:59x86
Ssomappingserver.dll6.0.4710.2109,22430-Jul-201318:59x86
Ssomessage.dll6.0.4710.2133,79230-Jul-201318:59x86
Ssops.exe6.0.4710.2101,00830-Jul-201318:59x86
Ssopsadmin.dll6.0.4710.296,92830-Jul-201318:59x86
Ssopshelper.dll6.0.4710.2101,02430-Jul-201318:59x86
Ssopsserver.dll6.0.4710.2191,13630-Jul-201318:59x86
Ssoservercfg.dll6.0.4710.2182,94430-Jul-201318:59x86
Ssosql.dll6.0.4710.268,24830-Jul-201318:59x86
Ssoss.dll6.0.4710.2117,39230-Jul-201318:59x86
Ssox6.sqlNot Applicable22,65718-Jul-201301:44Not Applicable
Ssox7.sqlNot Applicable3,99518-Jul-201301:44Not Applicable
Entsso.exe6.0.4710.294,36030-Jul-201318:59x64
Importexport.dll6.0.4710.274,40030-Jul-201318:59x64
Infocache.dll6.0.4710.2199,83230-Jul-201318:59x64
Microsoft.enterprisesinglesignon.managementagent.dll6.0.4710.268,33630-Jul-201318:59x86
Microsoft.enterprisesinglesignon.ui2.dll6.0.4710.2846,54430-Jul-201318:59x86
Ssoadmin.dll6.0.4710.2118,93630-Jul-201318:59x64
Ssoadminserver.dll6.0.4710.2187,04830-Jul-201318:59x64
Ssoclient.exe6.0.4710.282,58430-Jul-201318:59x64
Ssoconfig.exe6.0.4710.2130,20030-Jul-201318:59x64
Ssoconfigom.dll6.0.4710.2167,58430-Jul-201318:59x64
Ssoconfigstore.dll6.0.4710.2101,54430-Jul-201318:59x64
Ssocsserver.dll6.0.4710.294,36830-Jul-201318:59x64
Ssocstx.dll6.0.4710.263,64030-Jul-201318:59x64
Ssolookup.dll6.0.4710.2134,29630-Jul-201318:59x64
Ssolookupserver.dll6.0.4710.2183,46430-Jul-201318:59x64
Ssomanage.exe6.0.4710.2153,24030-Jul-201318:59x64
Ssomapper.dll6.0.4710.2138,90430-Jul-201318:59x64
Ssomappingserver.dll6.0.4710.2143,52830-Jul-201318:59x64
Ssomessage.dll6.0.4710.2126,11230-Jul-201318:59x64
Ssops.exe6.0.4710.2133,26430-Jul-201318:59x64
Ssopsadmin.dll6.0.4710.2106,14430-Jul-201318:59x64
Ssopshelper.dll6.0.4710.2110,75230-Jul-201318:59x64
Ssopsserver.dll6.0.4710.2269,47230-Jul-201318:59x64
Ssosql.dll6.0.4710.268,24830-Jul-201318:59x86
Ssoss.dll6.0.4710.2161,93630-Jul-201318:59x64
Ssox6.sqlNot Applicable22,65718-Jul-201301:44Not Applicable
Ssox7.sqlNot Applicable3,99518-Jul-201301:44Not Applicable

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

More Information

After you apply the hotfix that is described in this article, the Application Users group that is used by affiliate applications can contain more than 100 accounts. Additionally, the cumulative number of characters in account names can exceed 1024.

Note The Application Administrators group is not changed when you install this hotfix. Therefore, the limitations that are described in the "Cause" section still apply to the Application Administrators group after you apply the hotfix.

This hotfix includes an SQL script that is named Ssox7.eql. The Ssox7.sql script alters the SSODB database by changing the al_user_group_name column in the SSOX_ApplicationInfo table. After you apply this hotfix, the al_user_group_name has the nvarchar (MAX) data type instead of nvarchar(1024).

Important The SQL script that is used by the ENTSSO administration and configuration tools to update the SSODB database is not updated when you apply this hotfix. Therefore, you must reapply this hotfix or run the Ssox7.sql script if you use the ENTSSO administration and configuration tools to change the configuration to use a new SSODB database.


References

For more information about ENTSSO and affiliate applications, visit the following Microsoft MSDN website:

Properties

Article ID: 2480369 - Last Review: Mar 17, 2011 - Revision: 1

Microsoft Host Integration Server 2010, Microsoft Host Integration Server 2009, Microsoft Host Integration Server 2006, Microsoft BizTalk Adapters for Host Systems, Microsoft BizTalk Adapters for Host Systems 2.0, Microsoft BizTalk Server 2006 R2 Enterprise Edition, Microsoft BizTalk Server 2006 R2 Standard Edition, Microsoft BizTalk Server 2009 Enterprise, Microsoft BizTalk Server 2009 Standard, Microsoft BizTalk Server Enterprise 2010, Microsoft BizTalk Server Standard 2010, Microsoft BizTalk Server Branch 2010, Microsoft BizTalk Server 2009 Branch

Feedback