Copyright © 2007 , SAS Institute Inc. All rights reserved.

SAS Activity-Based Management Survey Kit (ASK):User Management & Security

Question:How does ASK manage users and security?

Answer:ASK 6.4 (or higher) supports two authentication methods:

1. ASK Native AuthenticationThis is the most flexible authentication method. You can define any users you want. In addition, non-Windows clients will also have equal access to their surveys.

2. Integrated Windows Authentication (What We’ll Talk About)This is the more secure option as ASK does not have to maintain user passwords in its database. You still need to register users in ASK database but you don’t have to supply their passwords. The users can be seamlessly authenticated by Active Directory and ASK will automatically take them to their assigned surveys (ASK login page is bypassed).

When ASK Native Authentication

Is enabled,All users will be presented

With the “Login Page”.

The IIS Server AdministratorCan enable Native Mode

By selecting “Enable anonymous access”On the ASK Virtual Directory.

The IIS Server AdministratorCan switch to Integrated Authentication by simply

Selecting only the “Integrated Windows

Authentication” option.

ASK Automatically recognized Integrated Windows AuthenticationSo the first person who accesses the new website

Will automatically be presented with the option to setupThe administrator user properties.

Notice there are no Password fields to worry about.

Tip: Use semicolons to specify multiple administrators. For example:

DOMAIN\SurveyDesigner;DOMAIN\SurveyDesigner2

You still have full control on who can access the application.

In this examplea user who logged in to his workstation as:

DONALD\sasdemo

Cannot access the application because the Administrator has not registered

The login to ASK User database.

John Jacob’s Windows ID has beenAdded to ASK – so when he accessedThe web application, ASK automatically

Takes him to his assigned surveys(no more ASK Login page).

If user gets a Windows Login Pop-up,Just be sure the user’s

Internet Explorer Security Optionis set to

“Automatic logon with current username and password”.

Copyright © 2007 , SAS Institute Inc. All rights reserved.

Thank You