Hello,
we have a standalone non-GIS JavaScript application that consumes a WebMap from ArcGIS Enterprise to provide spatial context.
Our ArcGIS Enterprise deployment uses SAML for authentication, and the standalone application is also integrated with SAML-based sign-in.
At present, when users access the WebMap from the application, they are prompted to click Sign In, which then initiates the ArcGIS Enterprise SAML authentication flow.
We would like to know whether we can achieve a more seamless authentication approach in this scenario by:
- implementing Integrated Windows Authentication (IWA) on WebAdaptor
- generating an ArcGIS token on behalf of the currently authenticated user (I found this might be not supported)
- any other supported mechanism to avoid the additional interactive sign-in prompt
Constraints:
- Authentication must remain user-specific
- A shared/generic token cannot be used
- The solution should ideally allow users already authenticated in the standalone app to access the WebMap without a separate ArcGIS sign-in step
Could you please advise whether this is supported, and if so, what the recommended architecture or configuration would be for ArcGIS Enterprise?
Thank you.
