Add ArcGis layer - Credentials lost?

[CID]

In several SharePoint sites, the ArcGIS for SharePoint component has been added with the goal of including, in each site, an ArcGIS layer that displays the GIS data specific to each project.
The usual process is as follows:
     The person responsible for editing the page accesses the SharePoint site.
     They insert the ArcGIS for SharePoint web part.
     They sign in to ArcGIS using the Sign in option.
     They select and add the project‑specific layer.

We have observed that the layer must be configured as public, because if it remains private or restricted, other users can see the map but the added layer displays the message “You don’t have access to this resource.”
Is this the expected behavior, or should the connection credentials have been saved instead?

Thanks in advance

[RaajRaaj]

Hello @CID --

Thanks for posting your question on Esri Community.

I have a couple of questions:

1. Does the person visiting the page have "view" permissions on the project specific layer?

2. Do you observe the same behavior when accessing a web map in Map viewer?

Thanks & Regards,

Raaj

[CID]

Hello @RaajRaaj 

The person has access to the SharePoint site but does not have an ArcGIS account.

Rather than answering each question separately, I think it’s more helpful to explain the need we are trying to address. Each SharePoint site in our organization stores the documentation for a specific project. Our initial idea was to add an ArcGIS for SharePoint component to each site so that every project could include the ArcGIS layers it needed, allowing any user with access to the SharePoint page to view the map and its layers without having an ArcGIS account.

However, our tests show that this does not work as expected. For ArcGIS layers to display in ArcGIS for SharePoint without requiring users to sign in to ArcGIS Online, the layers must be shared as public (Everyone/Public).

We may not be approaching this in the best way for our needs, so we would appreciate your guidance on how to proceed.

Thanks & Regards

[RaajRaaj]

Hello @CID --

Thanks for explaining your use case.

Is it safe to assume that the site visitors do not have ArcGIS account and they do not want to go through another sign-in dialog for ArcGIS before they can access the layer? Am I correct?

Have you looked into configuring SSO (Single-Sign On)? - https://learn.microsoft.com/en-us/entra/identity/saas-apps/arcgis-tutorial

Once you set up Single-sign on, the site visitor will sign-in once to log into their SharePoint tenant to access their site page. But since you've set up SSO, the user will not be prompted once again to sign in to their ArcGIS org.

Please let me know if this helps? If not, I can schedule a meeting so that we can meet and discuss your use cases in detail?

Thanks & Regards,

Raaj

[CID]

Hello @RaajRaaj 

Thank you for your reply.

That's correct — the site visitors do not have an ArcGIS account. Only the person who adds the ArcGIS for SharePoint web part and configures the layers has an ArcGIS account.

We will test configuring SSO in a test environment.

Preview

Thanks and regards

[RaajRaaj]

Thanks for confirming your use case.

Please let me know if the SSO option works for your use case.

Thanks & Regards,

Raaj