SAS Viya Workbench requires an OpenID Connect compliant Identity Provider to authenticate users.
This article shows how to create a Microsoft Entra ID (formerly Azure Active Directory) App registration, and how to configure SAS Viya Workbench to use it.
The steps below can be performed after the tasks described in Starting with SAS Viya Workbench are completed, and an Administrator can access the SAS Viya Workbench Organization Administration page.
1) Create an App Registration.
2) Add API permissions to the App.
3) Start creating the SSO connection.
4) Give the connection a meaningful name.
5) Configure the App for authentication.
6) Configure credentials
Azure Portal |
Workbench Organization Admin |
Navigate to your App registration -> Overview and copy the Application (client) ID value. |
Paste it under Credentials -> Client id in the SAS Viya Workbench SSO connection configuration. |
|
Azure Portal |
Workbench Organization Admin |
Navigate to your App registration -> Manage -> Certificates and Secrets -> Client Secrets. Click + New client secret, add a description, click Add and copy the secret's value. |
Paste it under Credentials -> Client secret in the SAS Viya Workbench SSO connection configuration. |
|
7) Import the App configuration.
Azure Portal | Workbench Organization Admin |
Navigate to your App registration -> Overview and click Endpoints. Copy the OpenID Connect metadata document URL. | Paste the URL and click Import. |
This is also known as the OpenID Connect Well-Known configuration endpoint. |
8 ) Save the configuration.
9) Configure a Domain
|
|
Important: The domain above is just an example. Add only domains you control for this configuration. |
10) Login as an Idp user.
|
|
If this happens, ask your Entra ID Tenant admin to grant admin consent by navigating to the App Registration -> Manage -> API Permissions -> Grant admin consent for <your tenant>.
|
That's it. Now users can start Using SAS Viya Workbench.
NOTE: The configuration above will allow logins from any user in the organization (tenant). If you want to restrict the App to allow logins only from assigned users, continue to step 11 below.
11) (Optionally) require users to be assigned to the App.
|
|
Are you ready for the spotlight? We're accepting content ideas for SAS Innovate 2025 to be held May 6-9 in Orlando, FL. The call is open until September 25. Read more here about why you should contribute and what is in it for you!