nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Active Directory Sync Automatically Add to Portal

ZachBodenner

Hello,

We are running Enterprise 10.8.1 and using our Active Directory to manage member login credentials. Currently, when new city employees are onboarded and need access to GIS services, I will either use a csv or manually add the user using their city email as their login. Fine and dandy, but I am hoping to set up a sync between our Active Directory and our Portal roll where whenever a new employee is added to the Active Directory by our IT staff, they're automatically added as a Portal member. Is this possible? Does anyone know how to set that up if so? I have been unable to find any documentation on it.

Find more posts tagged with

Accepted answers

ReeseFacendini

Portal doesn't have functionality to continuously sync with Active Directory, but you can enable auto account creation so when new users go to login for the first time their account setup is handled by Portal itself instead of you uploading a csv of new users. This link details how to enable auto account creation.

All comments

ReeseFacendini

ZachBodenner

Oo, I will have to give that a try! Will this work if their first attempt to access portal content is through a web application, or does it need to be targeting the actual portal url?

ReeseFacendini

I would recommend going to the main Portal URL first, just to be sure.

ZachBodenner

Thanks for the heads up, this worked exactly like I wanted!

PS, targeting a link to a web app that is controlled by a Portal web map did in fact add the user to Portal, just as hoped.

BillFox

For AD group membership syncing I think portal only does that once a day at midnight.

amarcz_cc

@ReeseFacendini Does enabling Auto Account Creation only add an account if they have matching credentials inside the Active Directory? Or will this add anyone who stumbles across the web service?

EDIT: Yes! It works with accounts accredited through the Active Directory Identity Store. Answered through testing in my environment.

Join the Conversation

Signed in members can post, follow updates, and more. New here? Register a free account.

Quick Links

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.