Question regarding configuration of Kerberos for SAS Logon Manager in SAS Viya

[EyalGonen]

Hi experts,

I am reading the doc for SAS Viya LTS 2024.09 about configuring Kerberos and something is not clear to me.

I need to configure Kerberos just for inbound SAS Logon Manager and no outbound Kerberos to any data source - that is only for SAS Visual Analytics and SAS Studio users with no access to any external services/data sources.

So, do I need to copy and modify only the sas-bases/examples/kerberos/http folder to site-config or do I need to also copy and modify sas-bases/examples/kerberos/sas-servers folder too?

My doubt raises from the fact that it is my understanding that Kerberos is used only for inbound and outbound but not for internal authentication within SAS Viya so hence my confusion about whether the "sas-servers" folders is needed to be used or only the "http" folder is enough.

[gwootton · Accepted solution]

I think you'd only need to do http if you're just using Kerberos for SASLogon authentication and not for authenticating to downstream services. This would fall under "Configuring Kerberos Single Sign-On for the SAS Viya Platform" in the README.md in that http directory.