Using field maps on our internal enterprise platform, our ICT came accross a login dialogue box allowing him log in using social media credentials

[PaulCreaner1]

My ICT department found a issue with field maps on our enterprise platerform. We use version 10.8 I think. We installed field maps on our mobile device to test some internal apps and everything looked fantastic. I was able to login on my mobile and every looked fine. However our ICT was able to somehow hit a few buttons that allowed him to the see a login screen where you could login using facebook or other social media.

Obviously this is a major concern for us as its important we want people to only login internally and dont want to go outside of the organisation. I was shocked at this can happen as I was convinced the enterprise out of the box app such as field maps, survey123 and quickcapture would work entirely internally in the enterprise environment. Has this happened to anyone else and what is the fix.

[JonathanMcD]

"Hitting a few buttons" is a bit vague - was he able to login, accessing the field maps you have setup? Or, was he just able to see, then create, a new public account using his own social media info. In AGOL do you have Social Media accounts enabled?
Just how far did things get?

[ArchitSrivastava]

Hi @PaulCreaner1 ,

Just to understand the situation a bit better, can you share a few more details?

• Was the login screen shown inside the Field Maps mobile app, or did it open in a browser window?
• Before that screen appeared, was Field Maps connected to your internal ArcGIS Enterprise portal URL, or could it have switched to the default ArcGIS Online sign-in screen?
• Was the Enterprise portal URL manually added in Field Maps under the portal settings?
• When the Facebook or other social media login options appeared, did the page show your Enterprise organization name/logo, or did it look like a generic ArcGIS Online / ArcGIS account sign-in page?
• Are users normally signing in with built-in Portal accounts, enterprise logins such as SAML/ADFS/LDAP/OIDC, or another identity provider?
• Is the mobile device connected through VPN or the internal network when accessing Field Maps?
• Does that VPN restrict internet access to internal resources only, or does the device still have full internet access while connected?
• Is the device iOS or Android?
• Is the device managed through MDM?
• Do you know the exact ArcGIS Enterprise version? You mentioned 10.8, but it would help to confirm whether it is 10.8 or 10.8.1.
• What version of Field Maps is installed on the mobile device?
• Was ICT actually able to authenticate using a social media account, or did they only reach a screen where those options were displayed?

These details will help determine whether Field Maps was still connecting to your internal ArcGIS Enterprise portal, or if it may have instead redirected to an ArcGIS Online or public ArcGIS sign-in page.

[PaulCreaner1]

Hi,

I am just an end user...I am not ICT.  I am just disappointd this has happened and we cant use the enterprise as we imagined. I was told all the esri apps would work on the enterprised the same as on AGOL. I will forward on your list to our ICT if you dont mind.

Thank you

[ArchitSrivastava]

Hi @PaulCreaner1,

No problem at all, and yes, please feel free to forward the questions to your ICT team.

I understand. Since they were the ones who saw the login behavior directly, they may be able to confirm whether Field Maps was still pointed to the internal Enterprise portal or if it had switched to an ArcGIS Online/public sign-in flow.

Please let me know what your ICT team finds when they get a chance to review it.

[ColinLawrence]

Hey @PaulCreaner1 just a heads up that Enterprise 10.8 is retired and 10.8.1 is retired as of tomorrow! 

That said it would be good to clarify how that team was able to access the social logins. Are they sure they did not select the ArcGIS Online login option? This auth screen will have the social logins turned on by default.