You can backup the SSO configurations when the SSO agent is unavailable.
There are primary manager and backup manager, however when the primary manager is unaccessible then you can allow Application SSO agent to contact the backup manger by modifying the registry in Application SSO agent.
Provide the backup manager host details in the Server available in the following path:
HKEY_LOCAL_MACHINE\SOFTWARE\Protocom\SecureLogin\RestCredentials
If the RDS connection broker, which is used for Remote AppSSO is not accessible then to restore the connection, it is required to update the Remote App Details of all Application SSO vaults. Specify valid FQDN in RD Connection Broker under the Remote App Details tab.