Hi. I'm looking at deploying Explorer for ArcGIS and these are the instructions I sent for someone to sign in:
- At the sign in interface choose ‘ArcGIS Online’
- Then choose ‘Enterprise Login’ (ignore the initial login form)
- For organization URL enter ‘xyz’
- Next choose ‘City of Bellevue’
- Now enter your AGOL login. This is your full email and your usual network password.
- You may be prompted for multi-factor authentication too, so you would need to use the RSA app to get the code and enter it.
- When you open the map, there are secured map services, and you will be prompted to authenticate. In this form, you will enter your username only (not full email) and your network password.
I joked to a colleague that the instructions for signing in are more complicated than the instructions for using the app. Not really a joke - that's a lot of opportunity for someone to mess up. They could choose enterprise rather than AGOL, they could enter their enterprise credentials in the prominent arcgis.com longin form, they can forget the organization url, in the enterprise login they can enter username rather than full email. In the secured service sign in they can use their full email rather than just username. The multi-factor part is an optional part that we implemented of course, but it's becoming more of a standard thing and ESRI should be aware of this.
<start rant>
Its understood that there are different approaches to authentication, and there are configurations or choices we have made that may be causing some of this confusion, but surely this can be simplified. As it stands its a big problem for casual or infrequent users.
</end rant>
Now to the practical question. I noticed that Collector app for iOS handles sign in better than Explorer. With Collector, you see a checkbox with the enterprise login that says 'remember this URL'. if that is checked, the next log in is much simplified, allowing the user to skip some of the above steps. With Explorer, I'm seeing the following:
- On one device, the checkbox is displayed, but checking it has no effect, and the user is continually required to enter the organization url part each time they sign in.
- On another device, the checkbox does not appear at all.
Is this a known bug? It would be great to get this working for Explorer if possible.
Thanks