Internal user accounts created during the configuration of SAS^® software do not take internal account policies into account. This issue occurs with default accounts such as sasadm@saspw, sastrust@saspw, and sasevs@saspw. 

As a result of this issue, you might observe that you can set the password using fewer characters than the rule should allow. This problem occurs even if you set the InternalAuthenticationPolicy in SAS-configuration-directory/Lev1/SASMeta/MetadataServer/omaconfig.xml as documented in the following resources:

• Reference Information for omaconfig.xml
• How to Change Internal Account Policies​​​​​

The issue occurs because internal users are created before the rule is effectively in place.

A fix for this issue is planned for a future software release.

If you encounter this problem, contact SAS Technical Support.

Operating System and Release Information