topic Re: Configuring single sign on for windows clients in Administration and Deployment

Configuring single sign on for windows clients

RupaJ — Thu, 16 Aug 2018 16:31:36 GMT

Hello SAS gurus!

I completed the SAS install and configuration on RHEL 7 virtual servers that I was working on this past month!! Thanks to all who helped me sail through the issues. The last thing that is left is to configure SSO for windows clients like SAS Enterprise guide/SAS MC.

So SAS 9.4 M5 is installed on linux RHEL 7 virtual machines, meta and mid tier on one machine and compute on a different server.We have a windows machine that has the clients like SASEG /SASMC. Now how do I go about configuring SSO. I understand this is a very broad question , however what I am looking for is a starting point (documents/links) that I can read through to get started.

So far I figured, I will have to configure kerberos on the linux servers, went through the below link

http://support.sas.com/documentation/cdl/en/bisecag/63082/HTML/default/viewer.htm#n1d1zo1jsf2o0en1ehu4c4simfky.htm#n15h2oxulh91hln160fqqmdkrkvl

Any guidance on how kerberos can be set up will be very useful, as that's the first step. Any other details will be helpful too :-). Thanks in advance!!

Re: Configuring single sign on for windows clients

JuanS_OCS — Fri, 17 Aug 2018 09:17:16 GMT

Hello @RupaJ,

please read Configuration Guide for SAS® 9.4 Foundation for UNIX Environments:

http://support.sas.com/documentation/installcenter/en/ikfdtnunxcg/66380/PDF/default/config.pdf

Specially chapters 3 and 4.

Re: Configuring single sign on for windows clients

RupaJ — Fri, 17 Aug 2018 14:05:06 GMT

Hello @JuanS_OCS

This is what I went through :-). However this mentions using Quest authentication services. I am planning to use kerberos. Is that fine? Looks like QAS is not free.

Re: Configuring single sign on for windows clients

alexal — Fri, 17 Aug 2018 14:23:01 GMT

@RupaJ,

For SAS 9.4M2 and later on Linux platforms, you must ensure that a shared library that implements the GSSAPI with Kerberos 5 extensions is installed and configured to allow authentication against your Active Directory domain or Kerberos realm. Quest Authentication Services fulfills this requirement, as do the krb5 packages provided in supported operating system distributions and in various third-party solutions.

For SAS 9.4M2 and later on all other UNIX platforms, you must purchase, install, and configure an additional third-party product (Quest Authentication Services 4.0).

https://go.documentation.sas.com/?docsetId=bisecag&docsetTarget=n0go7pclcqr6q2n1bxfuk46hmtdy.htm&docsetVersion=9.4&locale=en