Problem connecting to ArcGIS Enterprise 10.6.1 through Collector over VPN

[PaulReichart1]

Since upgrading ArcGIS Enterprise to 10.6.1 we are not able to sign in to Collector on iOS. We use a VPN to connect to our network and use Portal level authentication. It looks like Collector tries to log in through an in-app Safari browser and our organization doesn't allow access to any sites using Safari and VPN. This is really puzzling to me because 1) we can connect through ArcGIS Explorer, Collector Classic and Survey123 and 2) we can connect to Collector through ArcGIS Enterprise 10.5.1.

Has anyone else experienced this issue? Does anyone have any ideas on how to fix this? Esri does not provide support for VPN configurations.

Thanks

[Anonymous User]

Is there any way you can see if you can rule out the VPN by accessing the 10.6.1 Enterprise setup through and internal WiFi Connection? If you have the same issue in the internal network, then it would be easier to debug the web traffic via a program like fiddler and you can compare the web traffic to Collector signing on to ArcGIS Enterprise 10.5.1.

[Sanderten_Arve]

Hi Paul, Same here. I upgraded a customer AE base deployment test environment from 10.5.1 to 10.6.1 and it broke the authentication for ONLY the Collector for ArcGIS (IOS) using a Per-App VPN solution (airwatch). Explorer for ArcGIS still working fine as well as connecting Collector to another AE base deployment still running 10.5.1.

[MichelHeuvink]

Hello,

We also have the same issue. I am a System Administrator in our company. I also manage our MDM solution. I believe that this issue with Collector has to do with another iOS VPN issue. There is an issue that so called iOS Web Clips fail to open/launch in fullscreen mode when using VPN/Tunnel Safari Domain rules. My guess is that Collector uses the fullscreen Web Clip in the background. For our situation i have created a workaround. I configured a non-fullscreen Web Clip which points to our company Portal for ArcGIS. This Web Clip is automatically created on our iPads. Users open the Web Clip which opens Safari. They logon to the ArcGis portal and after that they open the Collector app. Because of the SSO configuration they are automatically are logged into Collector. 

Kind regards.

[PeterT_Brisbane]

We have the situation where Survey123 doesn't authenticate via F5 VPN with iPhone managed by Microsoft Intune.   

Collector and Explorer don't have problems.   

What would Survey123 be doing different?