topic Re: Avoid having Active Directory users ha to type domain at log in? in ArcGIS Enterprise Questions https://community.esri.com/t5/arcgis-enterprise-questions/avoid-having-active-directory-users-have-to-type/m-p/414727#M16080 <HTML><HEAD></HEAD><BODY><P>With web tier auth users will get the web tier challenge, like an IWA login. Personally, I'd go with SAML over web tier in this case.</P></BODY></HTML> Wed, 16 Aug 2017 13:26:35 GMT RandallWilliams 2017-08-16T13:26:35Z Avoid having Active Directory users have to type domain at log in? https://community.esri.com/t5/arcgis-enterprise-questions/avoid-having-active-directory-users-have-to-type/m-p/414724#M16077 <HTML><HEAD></HEAD><BODY><P>Is there a way to have my users not have to enter domain\username when logging into a service? I would prefer if they just typed in their username.</P></BODY></HTML> Mon, 14 Aug 2017 15:40:01 GMT https://community.esri.com/t5/arcgis-enterprise-questions/avoid-having-active-directory-users-have-to-type/m-p/414724#M16077 ChrisMathers1 2017-08-14T15:40:01Z Re: Avoid having Active Directory users ha to type domain at log in? https://community.esri.com/t5/arcgis-enterprise-questions/avoid-having-active-directory-users-have-to-type/m-p/414725#M16078 <HTML><HEAD></HEAD><BODY><P>Starting in 10.2, ArcGIS for Server can function in a multiple domain forest.&nbsp; To support this, if enterprise users and built-in roles are used, the enterprise users are linked to roles based on username and domain name.&nbsp; For this reason, with GIS-tier authentication, both the Active Directory username and domain are needed when signing in to access secured services.</P><P></P><P></P><P>When 'Allow access to all users' is enabled, the username alone will work but the authenticated user will not be assigned to the corresponding role(s).</P><P></P><P>If your installation of ArcGIS Enterprise is internal only, you can add your GIS Server and Portal to your list of trusted sites in IE and achieve a single sign on solution where the browser will pass the current domain credentials to the web adaptor.</P></BODY></HTML> Mon, 14 Aug 2017 18:10:25 GMT https://community.esri.com/t5/arcgis-enterprise-questions/avoid-having-active-directory-users-have-to-type/m-p/414725#M16078 RandallWilliams 2017-08-14T18:10:25Z Re: Avoid having Active Directory users ha to type domain at log in? https://community.esri.com/t5/arcgis-enterprise-questions/avoid-having-active-directory-users-have-to-type/m-p/414726#M16079 <HTML><HEAD></HEAD><BODY><P>I was planning on setting up AD users with AGS roles and GIS tier. Any way to make it work with that configuration? The enterprise is available externally and users off network will be connecting using accounts in AD. If I go web tier and someone tries to connect who isn't on a computer connected to the domain do they get the normal ArcGIS authentication popup? This stuff really isn't clear in the AGS documentation.</P></BODY></HTML> Mon, 14 Aug 2017 18:25:43 GMT https://community.esri.com/t5/arcgis-enterprise-questions/avoid-having-active-directory-users-have-to-type/m-p/414726#M16079 ChrisMathers1 2017-08-14T18:25:43Z Re: Avoid having Active Directory users ha to type domain at log in? https://community.esri.com/t5/arcgis-enterprise-questions/avoid-having-active-directory-users-have-to-type/m-p/414727#M16080 <HTML><HEAD></HEAD><BODY><P>With web tier auth users will get the web tier challenge, like an IWA login. Personally, I'd go with SAML over web tier in this case.</P></BODY></HTML> Wed, 16 Aug 2017 13:26:35 GMT https://community.esri.com/t5/arcgis-enterprise-questions/avoid-having-active-directory-users-have-to-type/m-p/414727#M16080 RandallWilliams 2017-08-16T13:26:35Z