Setup Portal 10.8.1 to Authenticate With M365

403
3
09-18-2020 09:42 AM
deleted-user-AS6_QJrk0S-e
New Contributor
  1. Is is possible to setup Portal to authenticate against Microsoft 365?
    1. *On-Prem AD does not Sync to 365
    2. I see ArcGIS Online in Enterprise Applications, but would like to use 365 accounts with portal too.
0 Kudos
3 Replies
ElliotJones
Esri Contributor

Hi @deleted-user-AS6_QJrk0S-e,

Portal for ArcGIS supports any SAML 2.0-compliant Identity Provider, which includes Azure Active Directory. Here's some information on configuring Azure AD with Portal for ArcGIS.

0 Kudos
GuillaumeCriloux
New Contributor

Beware that if you plan on using SAML for authorisation also, Azure SAML response includes only up to 150 groups per user. If your user belongs to more groups, none will be sent back by Azure. MS recommends to then fall back on querying the Graph API to get the relevant groups but Portal does not support that option.

DavidHoy
Esri Contributor

Guillaume, thank you for that post  - it's a real "gotcha" 
I wonder if it is possible to have AAD filter the list of Groups returned to keep the number below 150?
there seems to be some hope this might be possible according to this post in a Microsoft forum. https://techcommunity.microsoft.com/t5/azure-active-directory-identity/azure-ad-saml-is-it-possible-...