https://community.esri.com/t5/arcgis-enterprise-ideas/support-for-multiple-simultaneous-saml-and-or-oidc/idi-p/1711522 <P><STRONG>Category:</STRONG> Security / Authentication / Identity Management</P><P class=""><STRONG>Current Limitation:</STRONG><BR />ArcGIS Enterprise currently supports only one SAML identity provider (IdP) and one OIDC identity provider configured at the same time at the organization level.</P><P class=""><STRONG>Use Case / Role &amp; Context:</STRONG><BR />As an ArcGIS Enterprise administrator, I need to authenticate distinct user populations against different identity providers within the same organization — for example:</P><UL class=""><LI>Internal staff via a corporate SAML or OIDC IdP for SSO,</LI><LI>priviledged internal staff for Administration via&nbsp;a corporate SAML or OIDC IdP with 2FA,</LI><LI>External users via a federated government identity scheme (e.g., AGOV/SwissID in Switzerland) for public-facing or partner access.</LI></UL><P class="">Because only one SAML and one OIDC IdP can be active at a time, organizations with multiple legitimate identity sources are currently forced to either consolidate incompatible user populations behind a single IdP, or deploy separate ArcGIS Enterprise organizations solely to work around this limitation — which significantly increases licensing, infrastructure, and administrative overhead.</P><P class=""><STRONG>Proposed Solution:</STRONG><BR />Allow ArcGIS Enterprise to register and operate multiple SAML and/or multiple OIDC identity providers simultaneously at the organization level, similar to capabilities already available in modern IAM/CIAM platforms (e.g., Azure AD B2C, Auth0, Keycloak, Okta).</P><P class=""><STRONG>Impact / Business Value:</STRONG></P><UL class=""><LI>Avoids unnecessary duplication of ArcGIS Enterprise infrastructure purely to work around authentication constraints.</LI><LI>Enables secure onboarding of external users via national/government identity federation schemes without compromising internal SSO architecture.</LI><LI>Supports organizations with multiple legitimate identity domains (internal, external, partner) within a single Enterprise deployment.</LI></UL><P class=""><STRONG>Current Workaround:</STRONG><BR />None available other than deploying separate ArcGIS Enterprise organizations, which is costly and operationally complex.</P> Wed, 01 Jul 2026 12:48:20 GMT ValeskaKolligs 2026-07-01T12:48:20Z https://community.esri.com/t5/arcgis-enterprise-ideas/support-for-multiple-simultaneous-saml-and-or-oidc/idi-p/1711522 <P><STRONG>Category:</STRONG> Security / Authentication / Identity Management</P><P class=""><STRONG>Current Limitation:</STRONG><BR />ArcGIS Enterprise currently supports only one SAML identity provider (IdP) and one OIDC identity provider configured at the same time at the organization level.</P><P class=""><STRONG>Use Case / Role &amp; Context:</STRONG><BR />As an ArcGIS Enterprise administrator, I need to authenticate distinct user populations against different identity providers within the same organization — for example:</P><UL class=""><LI>Internal staff via a corporate SAML or OIDC IdP for SSO,</LI><LI>priviledged internal staff for Administration via&nbsp;a corporate SAML or OIDC IdP with 2FA,</LI><LI>External users via a federated government identity scheme (e.g., AGOV/SwissID in Switzerland) for public-facing or partner access.</LI></UL><P class="">Because only one SAML and one OIDC IdP can be active at a time, organizations with multiple legitimate identity sources are currently forced to either consolidate incompatible user populations behind a single IdP, or deploy separate ArcGIS Enterprise organizations solely to work around this limitation — which significantly increases licensing, infrastructure, and administrative overhead.</P><P class=""><STRONG>Proposed Solution:</STRONG><BR />Allow ArcGIS Enterprise to register and operate multiple SAML and/or multiple OIDC identity providers simultaneously at the organization level, similar to capabilities already available in modern IAM/CIAM platforms (e.g., Azure AD B2C, Auth0, Keycloak, Okta).</P><P class=""><STRONG>Impact / Business Value:</STRONG></P><UL class=""><LI>Avoids unnecessary duplication of ArcGIS Enterprise infrastructure purely to work around authentication constraints.</LI><LI>Enables secure onboarding of external users via national/government identity federation schemes without compromising internal SSO architecture.</LI><LI>Supports organizations with multiple legitimate identity domains (internal, external, partner) within a single Enterprise deployment.</LI></UL><P class=""><STRONG>Current Workaround:</STRONG><BR />None available other than deploying separate ArcGIS Enterprise organizations, which is costly and operationally complex.</P> Wed, 01 Jul 2026 12:48:20 GMT https://community.esri.com/t5/arcgis-enterprise-ideas/support-for-multiple-simultaneous-saml-and-or-oidc/idi-p/1711522 ValeskaKolligs 2026-07-01T12:48:20Z https://community.esri.com/t5/arcgis-enterprise-ideas/support-for-multiple-simultaneous-saml-and-or-oidc/idc-p/1711546#M4664 <P>I can't endorse/support this idea enough, any enterprise platform today needs to support multiple identity providers of the same type.&nbsp;&nbsp;</P> Wed, 01 Jul 2026 13:37:09 GMT https://community.esri.com/t5/arcgis-enterprise-ideas/support-for-multiple-simultaneous-saml-and-or-oidc/idc-p/1711546#M4664 JoshuaBixby 2026-07-01T13:37:09Z