The single sign-on is done by integrating Microsoft Dynamics GP with Active Directory. This can allow for all user provisioning to be done by the IT Helpdesk without requiring them to log into Dynamics GP itself which IT teams are not usually familiar with. Config AD installs onto the Domain Controller and provides a right click interface in the Users and Groups applet.
As it is unlikely that all maintenance will be done on the Domain Controller, Config AD also has a Config AD Desktop which can be installed on any client and allow users to be created and maintained.
Both the Users and Groups applet and Config AD allow a Microsoft Dynamics user can be created in seconds without the need to use the sa account within Dynamics GP or even to give the security and access roles in SQL Server to a user.