1. Copyright © 2007, SAS Institute Inc. All rights reserved. SAS Activity-Based Management Survey Kit (ASK): User Management & Security

2. Question: How does ASK manage users and security? Answer: ASK 6.4 (or higher) supports two authentication methods: 1. ASK Native Authentication This is the most flexible authentication method. You can define any users you want. In addition, non-Windows clients will also have equal access to their surveys. 2. Integrated Windows Authentication (What We’ll Talk About) This is the more secure option as ASK does not have to maintain user passwords in its database. You still need to register users in ASK database but you don’t have to supply their passwords. The users can be seamlessly authenticated by Active Directory and ASK will automatically take them to their assigned surveys (ASK login page is bypassed).

3. When ASK Native Authentication Is enabled, All users will be presented With the “Login Page”. The IIS Server Administrator Can enable Native Mode By selecting “Enable anonymous access” On the ASK Virtual Directory. The IIS Server Administrator Can switch to Integrated Authentication by simply Selecting only the “Integrated Windows Authentication” option.

4. ASK Automatically recognized Integrated Windows Authentication So the first person who accesses the new website Will automatically be presented with the option to setup The administrator user properties. Notice there are no Password fields to worry about. Tip: Use semicolons to specify multiple administrators. For example: DOMAIN\SurveyDesigner ; DOMAIN\SurveyDesigner2

5. You still have full control on who can access the application. In this example a user who logged in to his workstation as: DONALD\sasdemo Cannot access the application because the Administrator has not registered The login to ASK User database.

6. John Jacob’s Windows ID has been Added to ASK – so when he accessed The web application, ASK automatically Takes him to his assigned surveys (no more ASK Login page). If user gets a Windows Login Pop-up, Just be sure the user’s Internet Explorer Security Option is set to “Automatic logon with current username and password”.

7. Copyright © 2007, SAS Institute Inc. All rights reserved. Thank You