Summary of the "Best Practices" session ======================================= The major issue is the initial installation. The system is complex enough that one cannot expect to be able to successfully install and configure it without some training. At the very least read the manual, but proper training is recommended. There are two difficulties that you can expect to hit: 1) What exactly is needed regarding the certificates/proxies. 2) You will likely need to run the Q&A installer several times before getting everything right. Once the basic installation is in place, do not expect everything to work as expected just yet. The installer provides only basic installation and you should expect to spend some time customizing it (by hand). During this phase, follow the recommendations of either the manual or the training. Unless you have very trivial user needs, you will have to dedicate significant time to coin the match expressions. If you can cleanly partition the problem space, please do it by creating multiple groups since this will make the match expressions in each group smaller. However, that may not be possible, and you may end up with a single group with a quite big match expression. You should also push as much of the Negotiator matchmaking logic in the glidein START expression, and keep user job requirements as trivial as possible. This will allow you to keep the Frontend and Negotiator matchmaking policies in sync with minimal effort. Once things are properly configured, the operations is usually very smooth. Please do periodically look at the (Web) monitoring for signs of trouble, but there will likely be none, unless you recently changed the frontend config or have acquired radically new users.