topic Re: SSO experience in ArcGIS Server (stand alone, not federated to an ArcGIS Portal) in ArcGIS Enterprise Questions

SSO experience in ArcGIS Server (stand alone, not federated to an ArcGIS Portal)

BanchanaPandey — Fri, 22 Jan 2021 22:52:35 GMT

Is there any documentation on how to configure azure ad sso on a stand alone arcgis server? Everything that comes up is just for ArcGIS Enterprise which has Portal in it.

Is this even a possibility in a non-federated, stand alone arcgis server?

Our arcgis server is installed in a windows based machine with web adaptor and web tier authentication.

Right now, we are getting prompted for credentials, even after we provide our credentials through the Azure AD SSO which uses a SAML protocol. The credentials are not being passed through to the arcgis server. Almost feels like web adaptor is not getting the credential information from IIS and is not able to supply that to arcgis server.

Thanks!

Re: SSO experience in ArcGIS Server (stand alone, not federated to an ArcGIS Portal)

ZianChoy — Fri, 22 Jan 2021 17:30:47 GMT

https://enterprise.arcgis.com/en/server/10.7/administer/windows/securing-services-with-users-and-roles-from-an-ldap-server.htm looks useful.

Re: SSO experience in ArcGIS Server (stand alone, not federated to an ArcGIS Portal)

DEWright_CA — Fri, 22 Jan 2021 20:11:51 GMT

Then llikely will need to go through here...

LDAP authentication with Azure Active Directory

Re: SSO experience in ArcGIS Server (stand alone, not federated to an ArcGIS Portal)

BanchanaPandey — Tue, 26 Jan 2021 16:28:02 GMT

We are not using LDAP. We are using SAML.

Re: SSO experience in ArcGIS Server (stand alone, not federated to an ArcGIS Portal)

DEWright_CA — Tue, 26 Jan 2021 16:36:16 GMT

ArcGIS Server to authenticate using AD requires a psuedo-LDAP interface; the ability to handle SAML/XML isn't available at the AGS layer; only in Federated Portal to ArcGIS Server.