SANGFOR IAM v2.1 User Manual168 If the POP3 server is in the external network, to achieve SSO, you have to check the option[Allow users to access DNS service before authentication] (in [IAM] > [AuthenticationOptions] page> [Other Authentication Options]), and entitle the user‟s root group theprivilege to access the POP3 server.7.2.2.3. WEB SSO[Enable Web SSO]: Check this option to enable the Web single sign-on function.[Web authentication server: (format: IP or IP: port, or server domain name URL)]: Type the serverin the text box for Web SSO, as shown below: