We have been using AGOL for all Survey123 data collection. We now have portal up and running with federated server. I can link to Portal from Survey Connect. What I am looking for is documentation on best practices or step-by-step guidelines on how to setup portal so that published surveys can be made available to users outside our network. Since Portal is contained within our firewall, how can I allow our field staff access, from say their mobile phone, without compromising security?
You have 2 general approaches
1) You open up the portal to external access. This would mean opening up specific ports and potentially moving your portal instance outside of your firewall and into a DMZ. This requires planning and consideration in terms of security and the associated risks.
2) You use a VPN solution (Virtual private network - Wikipedia ) to provide the user/device access to your internal network and therefore the portal.
Here is a general resource that covers the specifics of Portal Security.
This is a very comprehensive resource: