How to Add an LDAP User to Connect to SAS Enterprise Guide ?

[Mahis]

Hi everyone,

Could you please confirm if these are the right steps to add a user (including an LDAP user) to connect to SAS Enterprise Guide ?

We're using SAS servers on Linux. First, we create a user account on the metadata server, then on the compute servers. After that, we set up the user's profile in SAS Management Console, assign the necessary roles and groups, and the connection to the SASApp server in SAS Enterprise Guide should work. The user should then be able to see the available libraries.

Thank you.

[Kurt_Bremser]

With a LDAP source, you should use the supplied example program (importad.sas) to synchronize SAS metadata with the LDAP source. Modify the program to your needs.

[Mahis]

Is there another way to do this? We already have users connected through LDAP and I noticed that the importad.sas script hasn't been modified since the installation.

The steps I followed worked when I tested with a regular user and password but I’m not sure how to do it for an LDAP user

[Kurt_Bremser · Accepted solution]

You need to follow a consistent strategy; your users are either maintained solely manually in SAS metadata, or solely automatically coming from LDAP.

If your institution/company maintains users in LDAP, then your CSO will surely force you to also have your SAS users there exclusively. In this case, the importad program must be adapted to your environment and run regularly (daily, hourly) via the scheduler.

[SASKiwi]

The method you have chosen is completely manual. There is nothing wrong with that approach when you are maintaining a small number of SAS users. However it doesn't scale well once you get beyond maybe 50 users. When you have that many then sychronising users automatically as described by @Kurt_Bremser is a better approach. 

[carl_sommer]

As others have mentioned, importad.sas is the way to go for an automated method for maintaining users in metadata.

However it's not wrong to define users manually either; however if you do, and intend to use importad..sas either now or in the future, be sure to define the external identity for the users you manually create, so that the matching key between metadata and your identity provider is in place.  See  SAS Help Center: External Identities

Carl Sommer - SAS Technical Support

[Mahis]

@Kurt_Bremser @SASKiwi @carl_sommer Thank you all for this information