Setting Up SAML / Azure AD

[AndyIngall]

Hello

I am looking to get SAML integrated with our GIS, and for those of you that have done this, how long should the task take from start to finish?

It doesn't look that difficult but I am getting some push back saying that it all needs to be a project and will take a long time to implement..

Any ideas welcome..

Thanks

Andy

[RamakrishnaBillakanti · Accepted solution]

You need to talk to your Azure AD Team or Security Team which handles implementation of SAML. It hardly takes any where between 10-15 mins as long as the person doing it is knowledgeable. Not more than that, There are multiple ways you can handle this either you can generate a XML or have them generate a file which you can import into ArcGIS Enterprise. Hope this helps out and good luck.

[MichaelJenkins]

If you have an active pool of users who are currently using ArcGIS built-in accounts, you will have to migrate all their content and group memberships to their new accounts.    If you implement SSO, it will require new ArcGIS Enterprise accounts for your users.   You cannot convert an existing built-in account to an SSO account.  That is the part that you should plan for ahead of time. 

You will also have to train / inform you users to click on the correct login button to use SSO rather than selecting the "ArcGIS login" and filling out a username and password.

Just enabling SSO is quick and easy, and you can run both SSO and built-in accounts at the same time, so nothing needs to break when you enable SSO.