nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Connect with SSO on Experience Builder application deployed in Enterprise

JasonBOCQUET

Hello, I try to develop my application in Experience Builder Developer.

I I successfully deployed my application to my Portal but when I share the link to my colleagues, they can't access to my application.

I set the share parameter of the layer in the application to "Organization only" because we don't want to publish data.

So when they click on the link, a pop-up asks them to enter their username/password to access to the application. But we use SSO with our Windows session IDs. If we use it to log in and use the app, it doesn't work.

How can we configure all of this so that the login/password request is SSO?

タグ付きの投稿をもっと見る

ArcGIS Enterprise

Accepted answers

All comments

AngelaSchirck

I'm not quite sure what you mean, how do YOU log in? We use an SSO, to login to Enterprise we click the link to our SSO, then put our SIM credentials. See image:

Which takes us here:

JasonBOCQUET

Yes I know about that. But when I share the link of my arcgis experience builder, the application ask my users to type a login/password in a pop-up, not in the same windows that your screenshot is.

AngelaSchirck

Oh, i know, something like this:

Did you use developers ed of EB? Can the people in your org sign in first and then access the app?

I'm not sure how to get around that...This might be a question for ESRI Support.

JasonBOCQUET

Yes exactly that !

And yes I use developer edition of experience builder.

If people sign first in their account, they can access to the application. But it would be better if when I send a link to my colleagues, they can also choice to connect by the SSO and not with this strange login/password popup.

I think I have to contact ESRI support.

AngelaSchirck

One way around it...in our org we created an "admin" user that logs in directly not using the SSO. So if I log in with this account it works. You could possibly do that and give your colleagues these login credentials to view the app.

JasonBOCQUET

It could be a solution but not in long-term approach. If anyone move out of the society, we have to change the ID's. And this, everytime anyone leave the society.

Thanks for the idea !

JeffreyThompson2

That sounds super dangerous. I would not recommend that.

JasonBOCQUET

you mean about security ? I take note of your prevention.

JeffreyThompson2

The suggestion above gives everyone a password that gets around whatever safeguards are on your company's SSO and gives them Admin access to your ArcGIS Enterprise. A malicious actor could literally destroy your entire Enterprise. And as it is a shared password, they could log in months after they got fired, blow up your system and you would never be able to prove who did it.

abureaux

Experience Builder version 1.13?

There is apparently a bug starting in 1.13 that causes the behaviour you are seeing. The bug (BUG-000163104) is already scheduled to be fixed, but no date given yet. I am hoping it's fixed in 1.14 though.

I just had this issue and had to get assistance from Esri. Experience Building is supposed to just "know" what authentication method your Portal is using and then copy that, so no configuration should be necessary (as opposed to WAB where you had to change a hidden setting).

JasonBOCQUET

Hi, I have the same problem previously on the version 1.12.

abureaux

Darn! I'm not sure then.

May be worth a call to Esri since SSO should be working in 1.12. The only requirement they mentioned was that your portal needed to already be set up with SSO, and Experience Builder needed to be tied to that specific portal.

JasonBOCQUET

with esri support we found a solution but it create some bug on the application at the first connexion (corrected by a refresh)

the solution : Going on organization settings > Security Panel > Uncheck the connexion with ArcGIS ID's in the "Identifiers" subcategory (sorry i don't have the exact name of the panels because i'm with french language).

With this changement, the connexion with SSO works but when a user going on the application at the first time per utilisation, he can't see the information on the application (map is empty, no filter appears, etc.)

abureaux

Esri gave me misleading advice on this one. But I am more surprised that I didn't stumble across this KB sooner...

So EB works like WAB in that you need to add the AppID to your exported EB. Check out steps 4-6 here.

This gives you an SSO popup (assuming you are configured for SSO). The one thing that I seem to be missing is the popup component... assuming it still exists. In WAB, it was jimu.js > tokenUtils.js > popup: false,

JasonBOCQUET

Hi @abureaux thanks for your answer. I already do that; the AppID is correctly writted on the config.json files.

Have I said before, the problem was solved by uncheck "ArcGIS Login" option.

XiaodongWang

Agree with abureaux, I think this problem is caused by the lack of clientId. Please double check that the clientId has been set on the config.json. Since the app is deployed under portal, you can try clientId 'experienceBuilder'.

JasonBOCQUET

hi @XiaodongWang now it works very well. Each time i have a new version of my exb i create a new folder on my wwwroot folder (i'm on arcgis enterprise so it's on the portal server) and add the client ID on the config.json

The only thing that is annoying me it's i'm forced to create another folder "App v1.2 > App v1.3"so the link for the user change every time. If i want to delete a folder called "App" to replace with the new version unziped with the same name my users have tons of problem : they see the old version, they forced to clear cache (and some of them doesn't know how to do that).

会話に参加する

サインインしたメンバーは投稿、更新のフォローなどができます。初めてですか？無料アカウントを登録してください。

クイックリンク

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.