I’m thinking the better method for Enterprise Guide is to store passwords in Metadata (EGUIDE > TOOLS > SAS ENTERPRISE GUIDE EXPLORER > FILE > MANAGE LOGINS) and then use the AUTHDOMAIN= option on the LIBNAME, etc.

When the encrypted password is used from Unix shell executed SAS programs, we tell users to put the code that sets a password variable in a file that has Unix permissions of 600 and do an include of that file, so only they can read the encrypted password and use it.