topic Re: Single Sing-On Experience with Enterprise Login in ArcGIS Experience Builder Questions

Single Sing-On Experience with Enterprise Login

Ranga_Tolapi — Mon, 23 Nov 2020 15:48:25 GMT

ArcGIS Portal (v10.8.1) is configured with Enterprise login (Azure AD) and it’s the only Sign-in option made active in ArcGIS Portal. Single Sign-On was verified successfully with ArcGIS Portal against Azure AD.

Our web application is developed in ArcGIS Experience Builder, deployed on web server (IIS) as per https://developers.arcgis.com/experience-builder/guide/deployment-topics/

Our web application is using a web map from ArcGIS Portal which is shared to only “Organization”, thus it needs to be allowed only after authentication.

For every attempt we make to launch our web application, challenged by 2 dialogs, 1st one is for sign-in and 2nd one is for permission. Please refer to the enclosed screenshots.

This is happening for the 1st attempt and all the subsequent attempts in the same browser (Google Chrome), different tabs. Even two consecutive attempts in the same browser’s different tabs have this behavior.

Screenshot-1

Screenshot-2: This is appearing when clicked OK in Screenshot-1

These both dialogs were impacting smooth Single Sign-On user experience for our web application. How to suppress/handle both the dialogs?

Re: Single Sing-On Experience with Enterprise Login

BillFox — Mon, 23 Nov 2020 19:46:30 GMT

Hello Ranga,

Is that webmap pointing to an ArcGIS Server service or a hosted item?

Federated?

Built-In > Shared user name and password when published?

Where is AEB at?

Re: Single Sing-On Experience with Enterprise Login

Ranga_Tolapi — Tue, 24 Nov 2020 02:45:50 GMT

Hello BillFox,

Please find my response below. Thank you.

Is that webmap pointing to an ArcGIS Server service or a hosted item?

- Webmap is pointing to hosted item.

Federated?

- Yes, federated.

Built-In > Shared user name and password when published?

- Webmap is a portal item pointed to federated ArcGIS Server. Webmap was shared to "Organization"

Where is AEB at?

- AEB is in my laptop. ArcGIS Portal is on Azure (IaaS), which can be connected from my laptop.

Re: Single Sing-On Experience with Enterprise Login

Wei_Ying — Thu, 26 Nov 2020 07:15:40 GMT

Hi @Ranga_Tolapi ,

Thanks for your feedback. But the behavior you described should be as expected. It is designed by js-api.
The first popup as above Screenshot-1 shows with OK/Cancel is actually to ask browser to allow actual login popup, which is as Screenshot-2. Since sometimes browser will block popup, the popup (screenshot-1) is to ensure the correct display of actual login page (screenshot-2)

Re: Single Sing-On Experience with Enterprise Login

Ranga_Tolapi — Thu, 26 Nov 2020 15:13:25 GMT

Noted with thanks @Wei_Ying

Re: Single Sing-On Experience with Enterprise Login

Ranga_Tolapi — Sun, 29 Nov 2020 04:36:30 GMT

Is there a way to get rid of Sign in dialog and Permission popup for subsequent attempts? Means, after successful authentication, when opened the web application in a new tab (same browser) both dialogs appearing again. Expecting a behaviour like Keep me signed in option for Enterprise log in.

@DavidMartinez

Re: Single Sing-On Experience with Enterprise Login

HarshvardhanSwami-Provista — Mon, 26 Jul 2021 03:44:40 GMT

Hi @Ranga_Tolapi ,

Greetings!

I am facing the same exact issue, where I am getting the two dialogs which is disturbing my smooth single-sign on experience. Have you find any solution to this? Can it be done programmatically?

Best regards,

Harsh

Re: Single Sing-On Experience with Enterprise Login

Ranga_Tolapi — Mon, 26 Jul 2021 04:04:30 GMT

You may refer to the below posts. Hope it helps.

https://community.esri.com/t5/arcgis-api-for-javascript-questions/esri-js-api-identitymanager-store-the-oauth-state/m-p/1044549#M72387

https://community.esri.com/t5/arcgis-api-for-javascript-questions/esri-js-api-identitymanager-how-to-use/m-p/1005394#M70933

https://community.esri.com/t5/arcgis-enterprise-questions/single-sign-on-experience-with-saml-on-arcgis/m-p/1005022#M29010