Hi everyone,   We applied, 2 years ago, SAML authentication in front of SAS Web applications as described by @MikeRoda in this paper "Federated Security Domains with SAS® and SAML". It works well for SAS Visual Analytics application for example, and enable users to access to their reports withouth authentication prompt. About SAS Studio, to authenticate users to the Workspace Server, we currently use SAS Token Authentication. We would like to enhance SAS Workspace Server authentication policy with user login authentication.   I had, previously, already configured this kind of "full SSO configuration" for Kerberos, and it works well. My question is : is exist any configuration to allow it with SAML authentication ? For information, Web authentication is passed through "email of the user", as it is registred in SAS Metadata Server : Authentication Domain ---> Web Login --> user's email I tried to add in user's login in metadata, a login for the Workspace Server and change the authentication mode to "prompt for user/passsword", but it does not work.   So, today, I ask first if this kind of configuration is possible or not ?   Example of the target's configuration in the SAS Management Console gsoulas is my current Linux user gaetan.soulas@datawaves.fr is my email configured to be authenticated per the SAS Web Server, via SAML module in SAS Web Server (Shibboleth) Best regards, Gaetan ... View more

  Hi everyone,   My SAS Web Application are using Web Server authentication with Shibboleth module to authenticate to SAS Application Server.   Using SAS Stored Process Server, SSO processus is working fine (email adress is used for task authentication between AD/FS and SAS Http Server).   But when we are logging to SAS Studio, cause Workspace Server authentication is needed, a prompt appears and asks for user/password.   So, the SSO processus is not complete using SAS Studio. In SAS Spwaner log, 'No host credentials exist to start server SASApp - Workspace Server (A5PL2MU0.AY000005)".   However, host login exists for my account (the proof is that NTLM authentication is Ok using SAS Enterprise Guide), but the authentication passed to the Object Spawner is not my host authentication, but my Web authentication (email adress).   So, have you got any idea to complete this SSO authentication ? Do you think this is feasible ?   This issue is very annoying, because users need to pass user/password authentication for each SAS Studio session.   My technical context :   - SAS9.4M6 - Windows Server 2018   Best regards, Gaetan             ... View more