SSO between AGOL and ArcGIS Enterprise

Question

Is it possible to set up SSO between AGOL and ArcGIS Enterprise for the same identity if you configure both systems to use the same identity provider?  That is can a user logged into one (ArcGIS Enterprise) switch to AGOL seamlessly without having to re-login?

Scott_Tansley · Answer

I liken it to being a customer of two banks.  AGOL is bank 1 and AGE is bank 2.  You wouldn't want to cross the streams.  AGOL and AGE are separate entities, so logging into one, will not allow you to bounce to the other.  That said, OpenID Connect is an option, you can log in to that IDP, and it passes your token to the application you visit.  So if you log in via OpenID connect then you can go 'straight into' AGOL, and then 'straight in to' AGE.   As long as you follow the links for the OpenID Connect screen.

GregCarlino2 · Answer

This topic is discussed here:
https://doc.arcgis.com/en/arcgis-online/administer/saml-logins.htm