As an update to my post about Configuring the Sharepoint MOSS Single Sign-On Service, I’ve discovered that the SSOADMIN user (the user account which the SSO service is run under) requires that the user account is granted the “Logon as Service” permission directly, rather than it being inherited by Group memberships or some other means.
Update: Configure Sharepoint (MOSS) Single Sign-On
Published by
platinumdogs.me 
Hi Phil, I am trying to find a way to automatically update SSO from Active Directory.
Ss this possible?
-S
Hi Stephen, not sure what you mean, could you provide more details
How do I remove the items from “Manage Enterprise Application Definitions” screen?