Level 1 Users as AD groups

Question

I would like to be able to use Portal, but am in an organization with hundreds/thousands of users (depending on the organization level). Is there any way to do this other than have two set-ups?

With the new levelled user option, and in Enterprise, can you set up a Level 1 user that includes a large Active Directory group? (assuming windows etc.) Or does adding an AD group still just add all the members as individuals?

Thanks

deleted-user-FfGbgR253rTy · Answer

The danger with anonymous use is security. I need to be able to expose web maps to both secure groups of external users, and internal groups of users, but many of these groups are large enough to make purchasing named user accounts impractical. With the traditional server set up, it's do-able, and I don't have to worry about managing the members of AD security groups already in use for the project, or purpose (which can be a surprisingly big task on it's own).

In short, named users are fine, but you need to have a model that supports large groups of users (preferably existing groups so we don't have to manage group membership in multiple places) so that enterprise implementation is practical. Annual pricing on everything is also problematic in this type of scenario.

JonathanQuinn · Answer

Yes, sorry if my post made it seem like I was suggesting that.  It's certainly against the license agreement to share a single account with multiple people, but configuring your portal with SAML authentication will give you the ability to take advantage of Windows accounts for users who require a named user in the portal but also gives you the ability to grant anonymous access to your portal for users who don't need a named user and just need to access a webmap.

deleted-user-FfGbgR253rTy · Answer

Will look at it... Didn't think it was as much a technical issue as a licensing agreement issue though... (i.e. can I have a single user in Portal or AGOL called "MYGROUP" and have all the members of that group able to view a web map restricted to that group?) We already have single sign on with our AGOL.
Providing a single account and password to multiple people is against our internal security policy, and, to my understanding, against the terms of our ESRI agreement...