The Users page in SAS^® Environment Manager for SAS^® Viya^® might not show the LDAP groups to which a user is a member. Group memberships should be listed on the Member Of tab when you view a user identity's details. At the same time, the details page for an LDAP group does show the user as a member. Memberships to the group are listed on the Members tab of the group identity's details.

When you encounter this issue, the identities service log contains no errors.

This problem can occur when the LDAP Directory service does not return a collection of memberOf groups that detail the groups to which the user belongs.

Typically, the LDAP service returns this information via a memberOf attribute when a user record is queried from LDAP. Some LDAP services, such as with Oracle Internet Directory (OID), do not return the memberOf attribute by default. Rather, you must explicitly request it. Common memberOf attributes are memberOf and isMemberOf.

The SAS Viya identities service was updated to explicitly request the memberOf attribute. SAS^® Viya^® 3.4 identities service version 2.17.12 and later and SAS^® Viya^® 3.5 contain this update.

To determine the version of the identities service you are running, connect to the /identities/apiMeta endpoint. The XML output shows the version similar to the following:

   "buildVersion":"2.16.7"
   
To get the update, refer to the section titled "Updating Your SAS Viya Software" in SAS^® Viya^® 3.4 for Linux: Deployment Guide (Before August 20, 2019).

Operating System and Release Information