Can Collaboration Provide AGOL Users the Ability to Edit a Secured ArcGIS Enterprise Feature Service?

[JonSwoveland]

So yeah, pretty much what the title asks.  I have a collaboration configured between my company's ArcGIS Enterprise 10.8.1 and AGOL Org.   In my Enterprise, I have a restricted feature layer  shared with a collaboration workspace group. The workspace is configured to share content by reference.  The layer successfully appears in the corresponding AGOL workspace group, however, when I add it to a map in AGOL, I am prompted to log in to my Enterprise. 

Have I misunderstood the capabilities of collaboration?   My hope was that by sharing the ArcGIS Enterprise layer to the AGOL collaboration workspace group, AGOL members of that group would gain access to that layer via their AGOL identity.

Is that not the case, or am I missing a configuration step?

[AndreasHall · Accepted solution]

When you share by reference the end user needs to have credentials to your Enterprise Portal. There is a setting to include viewer credentials to a workspace but it is only available for Enterprise to Enterprise collaborations. If you share as copy, you are not required to have credentials.

Manage collaborations as a host—Portal for ArcGIS | Documentation for ArcGIS Enterprise

[JonSwoveland]

Thanks Andreas.

That is...disappointing.  

Back to the drawing board. 

[MichaelJenkins]

I would say that yes, what you want is possible, but not through a collaboration.

A collaboration is best used when copying data from one place to another and keeping edits in sync.  Sharing by Reference is just a way to add content to the guest that has been added to the host, but since it is by reference you are bound by the authentication and authorization of the host.

Instead, you can manually add the AGOL item to your Portal and choose to store the credentials with the item.   Then you should be able to edit the data without being prompted to log in.  For the stored credentials, you will have to use a built-in account, it doesn't support enteprise authentication.

Add a service or document from a URL—Portal for ArcGIS | Documentation for ArcGIS Enterprise

[JonSwoveland]

Thanks Michael, unfortunately in this case, I need to track the identity of the user performing the edits, so stored credentials isn't going to work.

[MichaelJenkins]

In that case, would a collaboration 'by copy' with two way sync work for you?  The feature layer will get copied to Portal, edited there with editor tracking, and the edits will be synced back to AGO by the collaboration.

[JonSwoveland]

That's the option I'm looking at now, yeah.  

Thanks again!