Authentication Tasks

How to Configure SAS Internal Authentication

Note: There are no server configuration activities for SAS internal authentication. The metadata server always accepts valid internal account credentials. Internal accounts aren't intended for regular users. See SAS Internal Authentication. [cautionend]

To create and use an internal account:

Log on to SAS Management Console as someone who has user administration capabilities (for example, sasadm@saspw).
On the Plug-ins tab, select User Manager . Make sure you are in the foundation repository.
Right-click User Manager and select New User. On the General tab, enter a short word such as test in the Name field.
On the Accounts tab, click Create Internal Account. In the New Internal Account dialog box:
1. Notice that the user ID is constructed from the name that you entered on the General tab and an @saspw suffix.
2. Enter and confirm a simple initial password such as 123456.
  
  Note: These instructions assume that the default server-level policies for internal accounts are in place.
3. Select the Set a custom password expiration period check box and the expires every radio button. Leave the password expiration period at the default number of days.
4. Click OK to save the new internal account.
Notice that the new account appears at the bottom of the Accounts tab. Click OK to save the new user.
To log on to SAS Management Console as the new internal user:
1. From the main menu, select File Connection Profile. In the informational message box, click Yes.
2. In the Connection Profile dialog box, select Create a new connection profile and click OK.
3. In the Connection Profile wizard, name the profile internal, provide the machine name and port of the metadata server, and enter the internal credentials (for example, test@saspw and 123456). Click Finish.
4. In the Change Password dialog box, enter the original password again, enter and confirm a new password (such as 223456), and click OK.
  
  Note: You are forced to change the password because this is your first use of the account. This happens only for accounts that have a password expiration period (which you set in step 4c), and can also be affected by server-level policies.
5. In the message box, click OK. In the connection profile, enter the new password and click Finish.
6. If necessary, provide your internal credentials once again to log on.
Notice that you have the permissions and capabilities of the SASUSERS and PUBLIC groups (because you didn't make any additional group or role assignments for the test user in step 4).

Note: To clean up, log back on as someone who has user administration capabilities. In User Manager, delete the user that you created for this exercise. To delete the test user's home directory and MyFolder, select the Folders tab, navigate to SAS Folders Users, right-click the test folder, and select Delete. [cautionend]

	How to Unlock an Internal Account
	How to Change Internal Account Policies
	How to Create a Dual User