Hi
We have arcGisServer 10.5 installed, ArcGisPortal 10.5.
We have federated ArcGisServer to Portal.
Web tier authentication has been enabled.
We have written a widget using the web app builder dev edition 2.3, exported the app out and placed it on a web server.
(When web-appbuilder dev edition connects to our portal the signinInfo.json that gets created tells me our portal uses web tier authentication !)
The exported application has been added as an Item on Portal.
The application consumes feature services we have published and appear as items in Portal, these have been secured with groups, with the correct users added to the Identity store pulled through from Active Directory. The web map, the application and the feature services have all been shared to the group I have created.