Beginning with SAS Life Science Analytics Framework 5.4.1, the application uses an updated and more secure mechanism to store user account passwords.

Interactive User Accounts

As a result of the change, ALL interactive user accounts are required by the application to reset the account password when a user first accesses the 5.4.1 environment. The account password reset action is required to access 5.4.1 for the first time because all current interactive user account passwords are initially flagged by 5.4.1 as Expired.

For SAML enabled accounts, users are not able to access the SAS Life Science Analytics Framework application via the Desktop Connection client (SDDDC) or to sign files until the user account password is reset.

Note that recently used passwords remain in place. Thus, even though a new password storage mechanism has been put in place, users are still prevented from specifying a recently used password.  

Non-Interactive Account Types

The one exception is for non-interactive account types; the password for these accounts are NOT reset and continue to use the previous storage mechanism.  

For non-interactive user accounts, the previous storage mechanism is used until users decide to reset the password themselves or an application administrator resets the password for them. If an administrator resets the password for a non-interactive account, the new password can be used by the user without a required reset. However, the user might choose to reset the password to something that they select. 

It is recommended for non-interactive user accounts to also reset their passwords in order to take advantage of the updated and more secure password storage mechanism available with 5.4.1. 

Operating System and Release Information