topic Re: LDAP User login in Administration and Deployment

LDAP User login

nishukhawale — Tue, 05 Jul 2016 06:57:46 GMT

Hi,

I am refering the following document perticularly section

Configuring Web Authentication Starting with the Second Maintenance Release for SAS 9.4

http://support.sas.com/documentation/cdl/en/bimtag/68217/HTML/default/viewer.htm#n1bhp608f0hsoen10i1vi0p9l5f7.htm

I have made the changes as asked in the document but I am bit confuse in step 7 to 9,can any body help me out with these steps.

also I have sasdemo as LDAP user which is getting log in in SAS Mobile BI but for other users it is not happening.

Thanks&Regards

Nishant

Re: LDAP User login

Mark_sas — Wed, 06 Jul 2016 19:47:25 GMT

Steps 7-9 are important in order to get metadata identities set up for all of the users you're intending to access Web applications. You essentially assign them to a new authentication domain (web). They allow you to establish authorization settings for them. The sasdemo userid no doubt already exists in metadata, as that typically gets set up during initial deployment. Note that this section applies to the second maintenance of 9.4. In the third maintenance, SAS can create these metadata identities automatically upon successful Web authentication of a given user (covered in the ensuing section of the doc you cited).

If you continue to have issues in setting this up, SAS Technical Support should be able to help.

Re: LDAP User login

userid007 — Fri, 08 Jul 2016 02:54:45 GMT

1) are you creating users manually or through AD sync ?

2) either case, look at the accounts tab for the user and there should be two logins defined . One being Defaulthauth with domain\user id and another one with web authentication domain with only user id.

3) The login with web authentication is used for Windows integrated authentication.

4) When a users try to open the link, (use google chrome, if you use i.e you have to make changes to accept IWA) , the keytab (if you use spn ) will be matched against realm to generate the token (once succesful ) .

Best,
Sai Korrapati