Passwords

Each authentication provider sets password policies for accounts in that provider. For example, the password expiration policy for a host account is determined by that host.

For the SAS internal authentication provider, you can set server-level policies (in the metadata server’s omaconfig.xml file) and per-account policies (in a user’s metadata definition). See How to Change Internal Account Policies.

In the initial configuration, users can choose to store their credentials in their client-side connection profiles. This prepopulates the logon dialog box in desktop applications.

For most desktop applications, the SASSEC_LOCAL_PW_SAVE= option controls the availability of a check box that enables users to choose whether to store credentials locally. To prevent users from creating a local copy of their credentials, set SASSEC_LOCAL_PW_SAVE="N" (or ="0" or ="F") in the metadata server's omaconfig.xml file and restart the server.

In most cases, the SAS copy of an external account includes only a user ID. For these cases, no password updates in metadata are necessary.

For any external passwords that are stored in the SAS metadata, updates are driven by changes that first occur in the external authentication provider. For example, if a copy of the password for an Oracle account or a host account is stored in a group login, you must maintain that copy so that it always matches the actual password. Any change to the actual password (in Oracle) must be followed by a corresponding update to the SAS copy of the password (in the group login in the SAS metadata).

You can update stored passwords in SAS Management Console. If you own logins that include passwords, you can also update those passwords in SAS Personal Login Manager. For example, to update the SAS copy of an external password in SAS Management Console, navigate to the owning user or group definition, select the Accounts tab, select a login, and click Edit.

Every SAS internal account has a password. By initial policy, these passwords don't expire.

To update a SAS internal password in SAS Management Console, navigate to the owning user definition, select the Accounts tab, and click Update (at the bottom of the tab). If you have your own SAS internal account, you can also update your internal password in SAS Personal Login Manager.

Passwords for a few service accounts require special coordination because these passwords are included in configuration files. To update these passwords, use the SAS Deployment Manager.