SAS Infrastructure for Risk Management has some special instructions regarding Cross Site Request Forgery (CSRF) token checking, which are detailed below.
- See the details in the Cross Site Request Forgery Token Checking section of the SAS® 9.4 Middle-Tier Administration Guide.
- After you read the instructions above, be aware of the following notes that are specific to SAS Infrastructure for Risk Management:
- The SAS® web application is available in SAS® Management Console here: SAS Application Infrastructure ► IRM Mid-Tier.
- Ensure that the sas.web.csrf.token.performCheck is set to true.
- You need to set the set sas.web.csrf.token.allowedMethods to GET,HEAD,TRACE,OPTIONS (which is the default).