SAML and group AD

Question

Hello,

I have installed an arcgis server, arcgis portal through my intranet.

In order to authenticate from the Internet, we want to use TAM authentication, keeping AD authentication.

However, if we use SAML authentication, will the management of roles and rights by Active Directory (AD) groups remain possible?

Kinds regards

LynseyBlackburn · Answer

I do not have a specific sample, it will depend on the identity provider you use to set up these SAML logins: https://enterprise.arcgis.com/en/portal/latest/administer/windows/configuring-a-saml-compliant-identity-provider-with-your-portal.htm

With SAML logins and with IWA logins, you have the ability to pull from AD groups. However, these are separate login configurations. See the documentation here: https://enterprise.arcgis.com/en/portal/latest/administer/linux/about-configuring-portal-authentication.htm#ESRI_SECTION1_83F7B85FEF594A6B96997AF3CADF3D38

kvin · Answer

Hi,

From my understanding, to use SAML I have to chosse between AD or SAML authentication ?

Do you have a sample configuration for SAML ?

Best regards

LynseyBlackburn · Answer

Hey @kvin,

You are able to pull from existing Enterprise Groups (Active Directory groups) when SAML logins are set up in your Portal.

-Lynsey