BizTalk Server relies on Enterprise Single Sign‑On (SSO) to securely store critical information, such as adapter configuration properties. For example, it keeps sensitive values like proxy user IDs and passwords protected. Because of this, BizTalk Server requires SSO to function correctly.
In addition, SSO can store custom application configuration data. These settings often replace values that teams traditionally keep in configuration files, such as app.config.
However, BizTalk Server does not provide a built‑in command‑line tool to manage SSO application configurations. As a result, scripting deployments or implementing CI/CD pipelines through DevOps becomes difficult and error‑prone.
📝 One-Minute Brief
Managing BizTalk Server SSO application configurations often involves repetitive and error‑prone manual steps. This article introduces a command‑line tool that simplifies the creation, update, export, and import of BizTalk Server SSO application settings, making automation and DevOps scenarios easier in BizTalk Server 2020 environments.
BizTalk Server SSO Application Configuration CLI
BizTalk Server SSO Application Configuration CLI is a command-line tool that provides the ability to import SSO configuration applications – key-value pairs in the SSO database – that can be deployed to different environments. This way enables you to script these tasks.
This tool is designed to address this gap, allowing you to:
- You can securely import Application configurations by using this CLI application.
And it is mandatory to accept 5 arguments:
- Path: full path to the .sso file.
- Password: password to unencrypt the .sso file.
- Contact Info: Internal field that is normally in the format of an email that is used internally in SSO tables for Application Configurations.
- Application User Account: SSO Affiliate Administrators Group or the Group that will access (read) the key.values, for example: BizTalk Application Users.
- Application Admin Account: SSO Administrator Group – Administrators of the Enterprise Single Sign-On (SSO) service.
Download
THIS TOOL IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND.
You can download BizTalk Server SSO Application Configuration Tool from GitHub here:

Hope you find this helpful! If you liked the content or found it useful and would like to support me in writing more, consider buying (or helping to buy) a Star Wars Lego set for my son.
Hi,
can i change the Biztalk Windows account and groups that are already configured on BizTalk without unconfiguring the all features?
Windows account, you can. Windows groups I don’t think you can easily modify them, without reconfigure everything.
I am using Biztalk 2020 and would like to automate Biztalk installation using powershell. i am using this tool to import .sso files using powershell but application are not working and I manually import files using SSO Configuration Application MMC Snap-In tool (https://www.microsoft.com/en-us/download/details.aspx?) then application works. can you tell me what I am missing