What is the difference between these user addition options?

[AllWeatherHeather]

We started with ArcGIS Online and now we're configuring Portal for ArcGIS 10.4.1. As we figure out the security options and what will work best for us I have a question about the difference between the way they each work.

In ArcGIS Online...

In Portal 10.4.1...

Both are configured to use ADFS for authentication. What is the difference between these three user addition options?

Thanks,

Heather

[DerekLaw · Accepted solution]

Hi Heather,

The first two options:

• ArcGIS Online - Invite members to join using their enterprise logins
• Portal for ArcGIS - Add members for JD Irving enterprise logins via SAML

are conceptually similar, in that both use SAML authentication. In other words, your are leveraging a 3rd party identity provider to authenticate your logins. Some resources,

• ArcGIS Online: Set up enterprise logins—ArcGIS Online Help | ArcGIS 
• Portal for ArcGIS: Configuring a SAML-compliant identity provider with your portal—Portal for ArcGIS (10.5) | ArcGIS En... 

The third option for Portal only,

• Portal for ArcGIS - Add members based on existing enterprise users

is for adding users if you've enabled integrated Windows Authentication (IWA) on your Portal. More resources,

• Use Integrated Windows Authentication with your portal—Portal for ArcGIS (10.5) | ArcGIS Enterprise 
• Add members to your portal—Portal for ArcGIS (10.5) | ArcGIS Enterprise 

In your case, since you're using ADFS and you are configuring Portal for ArcGIS 10.4.1, you would select the second option.

Hope this helps,