Setup Portal 10.8.1 to Authenticate With M365

[deleted-user-AS6_QJrk0S-e]

1. Is is possible to setup Portal to authenticate against Microsoft 365?
   1. *On-Prem AD does not Sync to 365
   2. I see ArcGIS Online in Enterprise Applications, but would like to use 365 accounts with portal too.

[ElliotJones]

Hi @deleted-user-AS6_QJrk0S-e,

Portal for ArcGIS supports any SAML 2.0-compliant Identity Provider, which includes Azure Active Directory. Here's some information on configuring Azure AD with Portal for ArcGIS.

[GuillaumeCriloux]

Beware that if you plan on using SAML for authorisation also, Azure SAML response includes only up to 150 groups per user. If your user belongs to more groups, none will be sent back by Azure. MS recommends to then fall back on querying the Graph API to get the relevant groups but Portal does not support that option.

[DavidHoy]

Guillaume, thank you for that post  - it's a real "gotcha" 
I wonder if it is possible to have AAD filter the list of Groups returned to keep the number below 150?
there seems to be some hope this might be possible according to this post in a Microsoft forum. https://techcommunity.microsoft.com/t5/azure-active-directory-identity/azure-ad-saml-is-it-possible-...