So we have a webmap that is INTERNAL ONLY. We have to build the 'ArcGIS' map side online, then using WAB build the web map, prop it up on our internal server, and now it's asking for AGOL sign on. This is supposed to be used by Field Crews?! They will 'never' have AGOL accounts... what is the proper workflow for a situation like this?
I would install Portal for ArcGIS on-site, federate it with your ArcGIS Server site, Web Adaptor/SSO & SSL to on-site geodatabase and have your field crews use VPN.