Error on installing SSO on a clustered server

The SSO service account needs Full Control permissions to the cluster as per the following instructions http://msdn.microsoft.com/en-us/library/aa559783.aspx (search for "Full Control")

Otherwise configuring SSO will fail (can't start the service) with the following in the application event log;

The application could not connect to MSDTC because of insufficient
permissions. Please make sure that the identity under which the application
is
running has permission to access the cluster.

Failed to read the needed name objects from the registry. Error Specifics:
d:\nt\com\complus\dtc\dtc\msdtcprx\src\dtcinit.cpp:435, Pid: 2136
No
Callstack,
CmdLine: "C:\Program Files\Common Files\Enterprise Single
Sign-On\ENTSSO.exe"