topic Re: SASLogon user and password not hidden at connection in Administration and Deployment

SASLogon user and password not hidden at connection

willi_m — Thu, 24 Aug 2023 14:51:49 GMT

Hello,

We have a SAS Viya 3.5 platform and we discover in the connection page that username and password are not hidden in the Payload of the Post Request for connection.

Do you know how to mask these informations ? I think that there is a properties to set in the Environment manager, but don't find in the documentation which one.

Thanks in advance for your help.

Re: SASLogon user and password not hidden at connection

SASKiwi — Tue, 29 Aug 2023 01:01:22 GMT

Given the lack of a response, opening a Tech Support track for this is likely a better option.

Re: SASLogon user and password not hidden at connection

gwootton — Tue, 29 Aug 2023 12:40:08 GMT

This payload would be concealed from intermediaries by way of TLS encryption, but when viewing in browser tools it will show you what you are transmitting. Alternatively, you can use a non-password authentication mechanism (SAML, OIDC, Kerberos).