topic Re: Modern authentication methods for Analytics Pro? MFA required! in Administration and Deployment

Modern authentication methods for Analytics Pro? MFA required!

AndreasMenrath — Mon, 27 Nov 2023 14:16:07 GMT

I am reading through the Deployment Guide for SAS Analytics Pro LTS 2023.10 (https://go.documentation.sas.com/doc/en/anprocdc/v_029/dplyviya0ctr/n0zh696lmy7lfhn1mudoegfjj31h.htm) and now i am shocked that the documentation only mentions these authentication methods: local accounts, LDAP or AD.

Am i missing something? Are there no "modern" ways supported which provide multi factor authentication (e.g. OpenID Connect or SAML)?

Background: for security and governance reasons it is not allowed in my environment to login only with username and password.

I hope someone can give me an advice for implementing MFA with SAS Analytics Pro.

Regards,

Andreas

Re: Modern authentication methods for Analytics Pro? MFA required!

gwootton — Tue, 28 Nov 2023 15:37:19 GMT

This is possible with a full SAS Viya deployment, but with SAS Analytics Pro the software is relying on the underlying OS to authenticate via SSSD, or the built in sasdemo account.

Re: Modern authentication methods for Analytics Pro? MFA required!

EyalGonen — Wed, 29 Nov 2023 06:36:54 GMT

It is not clear if you need MFA or OICD/SAML.

If you need MFA then I believe you can accomplish this by configuring SSSD to support MFA (by using PAM modules see for example https://community.rsa.com/t5/securid-discussions/multi-authentication-using-ad-sssd-and-securid/td-p/509436) and then it is supposed to work with SAS APRO as SAS APRO works with SSSD.

Note: I have not tried it myself.

As for OICD/SAML see @gwootton's reply

Re: Modern authentication methods for Analytics Pro? MFA required!

AndreasMenrath — Fri, 08 Dec 2023 07:39:58 GMT

Thank you @EyalGonen and @gwootton for your feedback!