AUTHDOMAIN= LIBNAME Statement Option

Allows connection to a server by specifying the name of an authentication domain metadata object.

Valid in: SAS/ACCESS LIBNAME statement
Category: Data Access
Alias: GCSDOMAIN= [Google BigQuery]
Default: none
Restriction: Hadoop, Impala, Teradata: When using Kerberos authentication, do not also specify the AUTHDOMAIN= LIBNAME option.
Requirements: Google BigQuery: To use the CONNECT to <data-source> statement with PROC SQL with an authentication domain, you must use the GCSDOMAIN= alias.
For data sources with the SERVER= option, if you specify AUTHDOMAIN=, you must also specify the METASERVER= system option. However, the authentication domain references credentials, so you do not need to explicitly specify database USER= and PASSWORD=. Here is an example: 
options metauser="metadata-userid"  metapass="metadata-password"
                metaport=8561               metaprotocol=bridge
                metarepository="metadata-repository"
                metaserver="server-name";

libname A1 saphana server=mysrv1 port=30015 authdomain="hanaauth";
The authentication domain and the associated login definition must be stored in a metadata repository, and the metadata server must be running to resolve the metadata object specification.
Interaction: To specify AUTHDOMAIN=, you must also specify SERVER=.
Data source: Amazon Redshift, Aster, DB2 under UNIX and PC Hosts, DB2 under z/OS, Google BigQuery, Greenplum, Hadoop, HAWQ, Impala, Informix, JDBC, Microsoft SQL Server, MySQL, Netezza, ODBC, OLE DB, Oracle, PostgreSQL, SAP ASE, SAP HANA, SAP IQ, Snowflake, Teradata, Vertica, Yellowbrick
Notes: Support for Yellowbrick was added in SAS 9.4M7.
Support for Google BigQuery was added in SAS 9.4M9.
See: For complete information about creating and using authentication domains, see the credential management topic in SAS Intelligence Platform: Security Administration Guide.

Table of Contents

Syntax

AUTHDOMAIN=<'>authentication-domain<'>

Syntax Description

authentication-domain

specifies the name of an authentication domain metadata object.

Note: Enclose the authentication domain value in quotation marks if the value is specified in lowercase or in mixed case.

Details

An administrator creates authentication domain definitions while creating a user definition with the User Manager in SAS Management Console. The authentication domain is associated with one or more logs in metadata objects, which provide access to the server. The authentication domain is resolved when the DBMS engine calls the SAS Metadata Server and returns the authentication credentials.

Google BigQuery: When you connect to Google Cloud Platform, the credentials service returns a JSON credentials file. This differs from other data sources, where user and password values are returned.

Last updated: February 3, 2026