topic Re: Unable to sign out of FieldMaps - SAML & Android. in ArcGIS Field Maps Questions

Unable to sign out of FieldMaps - SAML & Android.

VickyS — Fri, 31 Mar 2023 09:21:48 GMT

Has anyone else had issues signing out of Field Maps with SAML authentication enabled in ArcGIS Enterprise? I can sign in and sign out but then if I tap 'sign in' again I am logged straight back in without being prompted for my credentials. Essentially we cannot switch users.

We have just installed ArcGIS Enterprise 11.0 and set up SAML authentication. FieldMaps on Android is not letting users sign out unless we clear the cookies from the browser. We are using Android 11 and FieldMaps 23.1.1. It works on iOS devices.

@ColinLawrence - Have you come across this before? It would be useful to know if it is a bug or a issue with our system set up.

Thank you

Re: Unable to sign out of FieldMaps - SAML & Android.

ColinLawrence — Fri, 31 Mar 2023 18:18:16 GMT

Hi @VickyS ,

This is a known issue that you are running into. The workaround is to clear your browser cache as you have already discovered. There is a Support bug logged for Collector (BUG-000133948) but not for Field Maps although its the same underlying issue. You could call Support and get attached to the existing bug or have them create a new one for Field Maps to track the status. We are still looking into a way around this one.

Re: Unable to sign out of FieldMaps - SAML & Android.

VickyS — Mon, 03 Apr 2023 07:41:57 GMT

That's very helpful thank you. I will ask ESRI UK support to do as you suggest.

It would be useful if the FieldMaps /Collector documentation included this bug as it is business critical if you depend on editor tracking and use shared devices.

Re: Unable to sign out of FieldMaps - SAML & Android.

PegGronemeyer1 — Mon, 15 May 2023 20:05:56 GMT

I was running into similar problems...So if I am understanding correctly, for a survey with multiple users, each user is going to constantly have to clear their browser cache on their device? I'm hoping that I am very wrong. Any update on this?

Re: Unable to sign out of FieldMaps - SAML & Android.

VickyS — Tue, 16 May 2023 10:43:03 GMT

Yes users have to clear the browser history. I logged a support call with ESRI UK and they have given me a bug reference. There is no update on whether or not it will be fixed. If you log a support call it may add some weighting to the issue.

BUG-000144885: When working with the user's own identity provider (IDP) in the ArcGIS Field Maps mobile app, SAML logins are cached, preventing a new user from logging in when a previous user logs out.

BUG-000144885 for ArcGIS Field Maps (esri.com)

The workaround for it is currently the following steps:

Log in to ArcGIS Field Maps on the mobile device through the SAML login.
Log out of the mobile app.
Clear the browser history.
Logging in now prompts for credentials, and another user can log in and use the ArcGIS Field Maps mobile app.

This workaround is only possible if there is a browsing history to clear.

We have also blocked access to Office365 apps on shared devices until this is rectified which far from ideal.

Re: Unable to sign out of FieldMaps - SAML & Android.

PegGronemeyer1 — Tue, 16 May 2023 16:01:28 GMT

Thank you so much for the quick answer

Re: Unable to sign out of FieldMaps - SAML & Android.

VickyS — Tue, 07 Nov 2023 14:13:27 GMT

Hi @ColinLawrence, do you have an update on this? The work around is not practical for field workers and the work around fail more often than not.

Thank you

Re: Unable to sign out of FieldMaps - SAML & Android.

ColinLawrence — Tue, 07 Nov 2023 18:47:09 GMT

Hey @VickyS it looks like no real progress has been made but I raised this as a concern so hopefully the team can re-evaluate. Thank you

Re: Unable to sign out of FieldMaps - SAML & Android.

AnthonyJonesRSK — Tue, 28 Nov 2023 10:14:03 GMT

Hi Colin, can this be escalated please? We have just adopted SSO and have just discovered this issue. It appears to occur even if the user declines for their credentials to be remembered. I find it pretty incredible that this has been an issue in Field Maps since 2021 and hasn't yet been resolved as it's quite a security risk, allowing users to access the accounts of others if they share a tablet, particularly if they've not consented to their credentials being stored in the browser.

Is it worth me raising a ticket myself on this to try and add some weight to the urgency for a fix?

Thanks

Anthony

Re: Unable to sign out of FieldMaps - SAML & Android.

RichardHowe — Tue, 28 Nov 2023 10:27:37 GMT

Adding weight to this request. ESRI potentially breaching GDPR regs here?

Re: Unable to sign out of FieldMaps - SAML & Android.

ColinLawrence — Tue, 28 Nov 2023 18:49:18 GMT

Can you please reach out to Tech Support and ask for this bug to be escalated (BUG-000133948)? That would be the official way to have it escalated. I had recently updated the bug to point to Field Maps instead of Collector.

Re: Unable to sign out of FieldMaps - SAML & Android.

VickyS — Thu, 30 Nov 2023 11:04:55 GMT

@ColinLawrence The bug need updating to read Android as well. I have contacted ESRI UK support team to escalate it I but just get sent the link to the bug page.

Re: Unable to sign out of FieldMaps - SAML & Android.

ColinLawrence — Thu, 30 Nov 2023 17:32:22 GMT

Hi @VickyS the title should already mention Android and it is logged under Field Maps Android bugs. Or are you referring to something else?

Re: Unable to sign out of FieldMaps - SAML & Android.

AnthonyJonesRSK — Fri, 19 Jan 2024 10:02:14 GMT

Hi Colin,

Just wondered if this is actively being looked into? I also raised this with Esri UK and was just informed that as it is already logged as a bug then there was nothing they could do. Is there potential for it to be escalated from its current "Medium" severity?

There is the potential scenario for us now that users will be able to access data they shouldn't have access to because they will find themselves logged into someone else's account by accident. This is a big problem for us when some clients ask us to sign confidentiality agreements. It also undermines the whole point of having data sectioned off in groups for different users.

The issue was originally raised in October 2020, I am genuinely baffled as to why this is not a higher priority for a company that considers data security paramount. Any update on this would be very much appreciated.

Thanks

Anthony

Re: Unable to sign out of FieldMaps - SAML & Android.

VickyS — Thu, 08 Feb 2024 12:14:17 GMT

Hello @ColinLawrence

Can you provide an update on this and reply to @AnthonyJonesRSK?

Our field users are understandably frustrated. What is ESRI's plan to address this bug? When will it be fixed? Will FieldMaps be developed to support android shared device mode?

Is there anyone else we can contract to gain support for this? I have had the same response as Anthony from ESRI UK support.

Thank you

Re: Unable to sign out of FieldMaps - SAML & Android.

ColinLawrence — Thu, 08 Feb 2024 20:29:55 GMT

Hopefully I can provide some context as understandably there are frustrations around this issue. I am by no means an authentication expert so please excuse if I misspeak slightly. Ultimately, this comes down to an issues with the Browser's (Chrome or chromium) caching behavior. Chrome does not by default allow private sessions when authenticating, and therefore the application will use existing cookies in the sign in process. When signing out of the app, we tear down the applications state but cannot tear down the browser cookie. We are investigating a workaround to allow users to authenticate regardless of browser state which should alleviate this problem.

Re: Unable to sign out of FieldMaps - SAML & Android.

Nirby — Tue, 02 Jul 2024 18:56:32 GMT

Our organization is also concerned about the security issue posed here. If ESRI is not escalating this further and addressing the bug, it's worth looking to local GDPR/FedRAMP regulations and reporting if in violation.

Re: Unable to sign out of FieldMaps - SAML & Android.

VickyS — Tue, 03 Sep 2024 09:10:01 GMT

Hi @ColinLawrence

Have you got anywhere with a fix for this issue across all ESRI apps? FieldMaps, QuickCapture & Survey123.

Thank you

Re: Unable to sign out of FieldMaps - SAML & Android.

AliciaShyu — Wed, 25 Sep 2024 19:02:52 GMT

Our organization also uses shared iPads, and periodically we'll borrow iPads from other departments.

We stumble on this solution but it only works for Field Maps on iPads. We don't have android devices, so not sure if it works on Android. If someone has a solution for QuickCapture, please let me know.

Login to FieldMaps
Open the User Profile window
Tap 3 times on the user icon

Select "Sign in"

Select "OAuth"

Change to "In App"
Sign out of FieldMaps
Sign back in, this time you'll get multiple login windows where you'll type in your user name and password

Hope this works for you. If anyone knows how to do this in QuickCapture, please don't gatekeep!

Re: Unable to sign out of FieldMaps - SAML & Android.

IngridHogle — Thu, 10 Oct 2024 21:20:59 GMT

I just called Esri Support about this issue, as I didn't understand how to do step 3, "Clear browser history", in the steps listed above. To do so, open Chrome, click the three stacked dots > History > All Time > Clear.

Esri Support told me the bug case is closed. The issue has been registered as a known issue for Field Maps on Android.