Full Single-Sign-On with SAML Authentication to SAS Studio

[Gaetan]

Hi everyone,

We applied, 2 years ago, SAML authentication in front of SAS Web applications as described by @MikeRoda in this paper "Federated Security Domains with SAS® and SAML".

It works well for SAS Visual Analytics application for example, and enable users to access to their reports withouth authentication prompt.

About SAS Studio, to authenticate users to the Workspace Server, we currently use SAS Token Authentication.

We would like to enhance SAS Workspace Server authentication policy with user login authentication.

I had, previously, already configured this kind of "full SSO configuration" for Kerberos, and it works well.

My question is : is exist any configuration to allow it with SAML authentication ?

For information, Web authentication is passed through "email of the user", as it is registred in SAS Metadata Server :

• Authentication Domain ---> Web
• Login --> user's email

I tried to add in user's login in metadata, a login for the Workspace Server and change the authentication mode to "prompt for user/passsword", but it does not work.

So, today, I ask first if this kind of configuration is possible or not ?

• Example of the target's configuration in the SAS Management Console

• gsoulas is my current Linux user
• gaetan.soulas@datawaves.fr is my email configured to be authenticated per the SAS Web Server, via SAML module in SAS Web Server (Shibboleth)

Best regards,

Gaetan

[SASKiwi]

That's how we do it for EG workspace server connections although we also add the AD domain on the front of the username like DOMAIN\UserAccount. Have you tried it?

[Gaetan]

Hello,

yes, I have tried it, but issue still occurs.