ESRI Support for installing portal on enterprise (Active Directory based Auth)

[Lake_Worth_BeachAdmin]

our organization has an ELA with ESRI and considering adapting portal. we currently have arc server up & running with Enterprise GDB with MS SQL Server 2016.

I am cautious with installing portal and wondered if ESRI tech support (someone experienced hopefully) can assist in setting up and configuring portal on our network with active directory auth.

Questions

- with portal installed can users access ESRI apps (Survey123/Collector) with there windows logon (active directory auth)?

currently we have services hosted on server requiring users to use their active directory logins to access. this means they need to know their AGOL logins to enter collector/survy123 to access their group maps and  their AD credentials when they want to work on projects (accessing the services hosted on Server)

I was hoping portal would remove this issue.

All insight is much appreciated.

[JonathanQuinn]

Yes, all client applications support IWA, so once you configure your ArcGIS Enterprise, (and federate your Server, if required) to use IWA, your users can connect to it and be automatically authenticated.

[Lake_Worth_BeachAdmin]

So users will no longer need AGOL credentials to access the collector/survey123 apps? they connect via portal and those same credentials are used by default to access the specific services hosted on server?

[JonathanQuinn]

Yes, that's right.  All authentication will be handled by Portal and in your case, your AD.

[Lake_Worth_BeachAdmin]

Hello Jonathan,

another question regarding Portal (10.5). Our organization acquired a CA signed SSL cert for our web adapter connecting to server. Can we use the same cert for portal?

[JonathanQuinn]

Yes, you can use the same certificate as long as the CN or SAN matches the hostname of the web server. If the web adaptors are installed on the same web server, then there's nothing to worry about.