Authenticate with an Authentication Domain

Details

The following is an example of how the AUTHDOMAIN= server connection option is used in the FEDSVR LIBNAME statement. The AUTHDOMAIN= server connection option enables a program to use metadata server connection system options to resolve the calling identity instead of specifying USER= and PASSWORD= values in the LIBNAME statement.

Program

options metaserver="d5678.us.company.com"
	  metaport=8561
	  metauser="myid"
	  metapass="mypassword"
     metarepository=foundation;1

libname lib1 fedsvr server="d1234.us.company.com" port="2171" 
authdomain="fedauth1"2dsn=BASEDSN1;

proc datasets lib=lib1; run; 
quit;

Program Description

  1. The OPTIONS statement specifies SAS Metadata Server connection system options. The system options assign the session context to the user identified in METAUSER= and METAPASS= and establish a connection to the SAS Metadata Server on this user’s behalf. For more information about metadata server connection system options, see the SAS Language Interfaces to Metadata. These system options can be specified in a configuration file, as well as in the OPTIONS statement.
  2. The AUTHDOMAIN= server connection argument specifies the name of an authentication domain that is defined on the SAS Metadata Server.
    If the specified authentication domain, FEDAUTH1, is a valid authentication domain for the user identified in METAUSER= and METAPASS=, and this user ID also authenticates to the DataFlux Authentication Server, then SAS permits the Federation Server connection.
    The AUTHDOMAIN= server connection option does not bypass authentication by the DataFlux Authentication Server; it also routes authentication through the SAS Metadata Server. For more information about authentication domains, see the SAS Intelligence Platform: Security Administration Guide.