SAS Infrastructure for Risk Management has some special instructions regarding Cross Site Request Forgery (CSRF) token checking, which are detailed below.

1. See the details in the Cross Site Request Forgery Token Checking section of the SAS^® 9.4 Middle-Tier Administration Guide.
2. After you read the instructions above, be aware of the following notes that are specific to SAS Infrastructure for Risk Management:

• The SAS web application is available in SAS^® Management Console here: SAS Application Infrastructure ► IRM Mid-Tier.
• Ensure that the sas.web.csrf.token.performCheck is set to true.
• You need to set the set sas.web.csrf.token.allowedMethods to GET,HEAD,TRACE,OPTIONS (which is the default).

Operating System and Release Information