Hi, Following discussions with Mike Roda directly, Mike whom I would like to thank warmly for his availability, I communicate you his answer about this topic : The JNDIRealm referred to in the SAS documentation on web authentication is a form of web authentication that uses the built-in functionality from the Apache tomcat software to authenticate with an LDAP server. We sometimes call this container-based security since the container (Apache Tomcat) is doing the authentication. This is provided in the SAS documentation as an example only and does not apply to your case. Instead of container-based security, you will be using the PrincipalFromRequestHeadersValve, which will intercept requests coming from the web server and set an authenticated user in the request. For my part, I have just identified the issue. Issue comes from encoding password implementation (SAS Web App Server) with tcruntime-admin.sh script (SAS9.4M5). You have to protect some special characters with backslash and do not enclose characters with quotes. I suggest you to test your SAML configuration without password first in developpment environment. Best regards, Gaétan
... View more