Connect with SSO on Experience Builder application deployed in Enterprise

[JasonBOCQUET]

Hello, I try to develop my application in Experience Builder Developer.

I I successfully deployed my application to my Portal but when I share the link to my colleagues, they can't access to my application.

I set the share parameter of the layer in the application to "Organization only" because we don't want to publish data.

So when they click on the link, a pop-up asks them to enter their username/password to access to the application. But we use SSO with our Windows session IDs. If we use it to log in and use the app, it doesn't work.

How can we configure all of this so that the login/password request is SSO?

[JasonBOCQUET]

omg ok. not a good idea.

I will contact the support to understand if there is a possibility to get the SSO connexion windows just by clicking on the application link.

Thanks for your warning.

[AngelaSchirck]

Yes, we don't give this information out to EVERYONE, just our GIS employees.

[abureaux]

Experience Builder version 1.13?

There is apparently a bug starting in 1.13 that causes the behaviour you are seeing. The bug (BUG-000163104) is already scheduled to be fixed, but no date given yet. I am hoping it's fixed in 1.14 though.

I just had this issue and had to get assistance from Esri. Experience Building is supposed to just "know" what authentication method your Portal is using and then copy that, so no configuration should be necessary (as opposed to WAB where you had to change a hidden setting).

[JasonBOCQUET]

Hi, I have the same problem previously on the version 1.12. 

[abureaux]

Darn! I'm not sure then.

May be worth a call to Esri since SSO should be working in 1.12. The only requirement they mentioned was that your portal needed to already be set up with SSO, and Experience Builder needed to be tied to that specific portal.

[JasonBOCQUET]

with esri support we found a solution but it create some bug on the application at the first connexion (corrected by a refresh)

the solution : Going on organization settings > Security Panel > Uncheck the connexion with ArcGIS ID's in the "Identifiers" subcategory (sorry i don't have the exact name of the panels because i'm with french language).

With this changement, the connexion with SSO works but when a user going on the application at the first time per utilisation, he can't see the information on the application (map is empty, no filter appears, etc.)

[abureaux]

Do you mean this option?

If so, I am unable to change that setting as we have a few built-in accounts still.

If rolling back to 1.12 doesn't give me what I want, I guess I'll call Esri support back and see if they have another suggestion.

(And no worries about not having the exact names. Your English is far better than my French!)

[JasonBOCQUET]

Yes, this option.

Below this option, if you have a SSO option, you have the option to check it. But if you have already people who log in your Portal without SSO i have no idea to solve this.

Call the Esri Support is the best solution I think.

[abureaux]

Esri gave me misleading advice on this one. But I am more surprised that I didn't stumble across this KB sooner...

So EB works like WAB in that you need to add the AppID to your exported EB. Check out steps 4-6 here.

This gives you an SSO popup (assuming you are configured for SSO). The one thing that I seem to be missing is the popup component... assuming it still exists. In WAB, it was jimu.js > tokenUtils.js > popup: false,

[JasonBOCQUET]

Hi @abureaux thanks for your answer. I already do that; the AppID is correctly writted on the config.json files.

Have I said before, the problem was solved by uncheck "ArcGIS Login" option.