topic Active Directory Sync Automatically Add to Portal in ArcGIS Enterprise Questions

Active Directory Sync Automatically Add to Portal

ZachBodenner — Wed, 02 Mar 2022 14:16:29 GMT

Hello,

We are running Enterprise 10.8.1 and using our Active Directory to manage member login credentials. Currently, when new city employees are onboarded and need access to GIS services, I will either use a csv or manually add the user using their city email as their login. Fine and dandy, but I am hoping to set up a sync between our Active Directory and our Portal roll where whenever a new employee is added to the Active Directory by our IT staff, they're automatically added as a Portal member. Is this possible? Does anyone know how to set that up if so? I have been unable to find any documentation on it.

Re: Active Directory Sync Automatically Add to Portal

ReeseFacendini — Wed, 02 Mar 2022 15:34:15 GMT

Portal doesn't have functionality to continuously sync with Active Directory, but you can enable auto account creation so when new users go to login for the first time their account setup is handled by Portal itself instead of you uploading a csv of new users. This link details how to enable auto account creation.

Re: Active Directory Sync Automatically Add to Portal

ZachBodenner — Wed, 02 Mar 2022 15:43:36 GMT

Oo, I will have to give that a try! Will this work if their first attempt to access portal content is through a web application, or does it need to be targeting the actual portal url?

Re: Active Directory Sync Automatically Add to Portal

ReeseFacendini — Wed, 02 Mar 2022 15:46:56 GMT

I would recommend going to the main Portal URL first, just to be sure.

Re: Active Directory Sync Automatically Add to Portal

ZachBodenner — Wed, 02 Mar 2022 17:09:41 GMT

Thanks for the heads up, this worked exactly like I wanted!

PS, targeting a link to a web app that is controlled by a Portal web map did in fact add the user to Portal, just as hoped.

Re: Active Directory Sync Automatically Add to Portal

BillFox — Wed, 02 Mar 2022 18:22:44 GMT

For AD group membership syncing I think portal only does that once a day at midnight.

Re: Active Directory Sync Automatically Add to Portal

Amarz — Wed, 06 Sep 2023 00:31:30 GMT

@ReeseFacendini Does enabling Auto Account Creation only add an account if they have matching credentials inside the Active Directory? Or will this add anyone who stumbles across the web service?

EDIT: Yes! It works with accounts accredited through the Active Directory Identity Store. Answered through testing in my environment.