Using the Privileged Access Service for single sign-on
When you use Privileged Access Service for single sign-on only with the Centrify Directory as your identity store, there is nothing for you to install.
Note: It may be necessary for users to install the Privileged Access Service Browser Extension on their browser. Many popular applications require the browser extension to provide single sign-on.
You can also provide single sign-on to the web applications from the users’ devices. In this case, the users need to install the free Centrify application on their devices and register their devices in the Privileged Access Service.
If you want to use your Active Directory/LDAP accounts to authenticate Privileged Access Service users, you install the Centrify Connector and the Active Directory Users and Computers console extension on a Windows computer inside your firewall. Note that Active Directory Users and Computers is for Active Directory deployments only.