When a user from the IDP signs in, a new user with the user name NameID is created by Portal for ArcGIS in its user store. Since Portal for ArcGIS uses the value of NameID to uniquely identify a named user, it is recommended that you use a constant value that uniquely identifies the user. Sent by your IDP in the SAML response for theįederation to work with Portal for ArcGIS. The NameID attribute is mandatory and must be Received from the IDP when a user signs in usingĮnterprise logins. Portal for ArcGIS requires certain attribute information to be To configure Azure AD with ArcGIS Enterprise, you need a premium Azure AD subscription. The configuration process involves two main steps: registering Azure AD in your ArcGIS Enterprise portal and registering Portal for ArcGIS in your Azure AD portal. You can configure it as your IDP for enterprise logins in Portal for ArcGIS on-premises and in the cloud. Microsoft Azure Active Directory (AD) is a Security Assertion Markup Language (SAML)-compliant identity provider (IDP). Register Portal for ArcGIS as the trusted service provider with Azure AD.Register Azure AD as the enterprise IDP for your portal.Testing did not include using the SAML protocol. These third-party identity providers were tested for interoperability with Microsoft cloud services using WS-Federation and WS-Trust protocols only. For support and questions regarding these identity providers, contact the supported third-parties directly. issues and questions regarding these identity providers. Important: Since these are third-party products, Microsoft does not provide support for the deployment, configuration, troubleshooting, best practices, etc.
Use of Sign-in by Alternate ID to UPN is also not tested in this program. components of these single sign-on scenarios. Microsoft did not perform any testing of the synchronization, two-factor authentication, etc. Note: Microsoft tested only the federation functionality of these single sign-on scenarios. These tests were validated on or before April 2018. The following identity providers were tested for compatibility with Azure Active Directory by Microsoft, or by Oxford Computer Group on behalf of Microsoft, against a set of use cases common with Azure Active Directory.
0 kommentar(er)
