You need to ensure that all users in the Contoso domain can access the Service Manager Self-Service Portal