ArcGIS Enterprise SSO

Question

Hello, I have integrated my AD with enterprise successfully and achieved SSO by disabling anonymous access. This however does remove the option for a named user outside my organisation to sign-in.

Is this behavior expected? I was hoping for SSO for my internal organisation users, and the normal named user sign-in for users outside the organisation.

Thanks!

Scott_Tansley · Answer

Most organisations use SAML2 rather than IWA for that sort of use case.

You cannot have anonymous and IWA in place at the same time.  It's self-defeating from a security perspective.  So, if you use IWA then all users will be challenged for a login, and you would need to provision an AD account for your external users.