Modern authentication methods for Analytics Pro? MFA required!

[AndreasMenrath]

I am reading through the Deployment Guide for SAS Analytics Pro LTS 2023.10 (https://go.documentation.sas.com/doc/en/anprocdc/v_029/dplyviya0ctr/n0zh696lmy7lfhn1mudoegfjj31h.htm) and now i am shocked that the documentation only mentions these authentication methods: local accounts, LDAP or AD.

Am i missing something? Are there no "modern" ways supported which provide multi factor authentication (e.g. OpenID Connect or SAML)?

Background: for security and governance reasons it is not allowed in my environment to login only with username and password.

I hope someone can give me an advice for implementing MFA with SAS Analytics Pro.

Regards,

Andreas

[gwootton · Accepted solution]

This is possible with a full SAS Viya deployment, but with SAS Analytics Pro the software is relying on the underlying OS to authenticate via SSSD, or the built in sasdemo account.

[EyalGonen]

It is not clear if you need MFA or OICD/SAML.

If you need MFA then I believe you can accomplish this by configuring SSSD to support MFA (by using PAM modules see for example https://community.rsa.com/t5/securid-discussions/multi-authentication-using-ad-sssd-and-securid/td-p...) and then it is supposed to work with SAS APRO as SAS APRO works with SSSD.

Note: I have not tried it myself.

As for OICD/SAML see @gwootton's reply

[AndreasMenrath]

Thank you @EyalGonen and @gwootton for your feedback!