SAS Federation Server works
with SAS Metadata Server to perform
authentication for users and groups. When a user connects to SAS Federation Server
to access data, the user’s authenticating credentials are passed
to the SAS Metadata Server for validation. Once
the credentials are validated, the SAS Metadata Server
will identify the user based on the submitted credentials. SAS Federation Server
can then make requests to the SAS Metadata Server
for information about the user, including logins and group membership.
If a user is authenticated but cannot be identified in the SAS Metadata Server,
that user becomes a member of the PUBLIC group. All users that are
identified in the SAS Metadata Server are members
of the SASUSERS group. If a user is designated as SYSTEM or ADMINISTRATOR,
their personal credentials are used to authenticate.