You can use the SRSURL, ENVFILE, or ENVIRONMENT options to call a SAS secured service without having to supply a set of credentials. In this case, you do not need to use the WSSUSERNAME, WSSPASSWORD, or WSSAUTHDOMAIN options. This functionality eliminates the need to store user credentials in metadata and reduces the flow of credentials across the network. A connection to the metadata server is required. Credentials that are valid for a single use will be generated for the user that is connected to the metadata server.