In preparation for using 3270 single sign-on, the system administrator must define a host security domain containing host connections. This host security domain must be initially created or modified to enable the single sign-on feature. The system administrator must enable a user's Microsoft® Windows NT® account in the host security domain and either the administrator or the user must establish a mapped host account for the Windows NT domain user name.
The user must be logged on to a Windows NT domain with a user name and password. Note that this single sign-on feature is only supported over 3270 LUs.