Mastering ArcGIS Enterprise Administration

Enterprise identity store

Through the use of an enterprise identity store, such as AD, LDAP, and identity providers that support SAML, you can use existing enterprise accounts and groups to control access to your Portal. With this approach, no additional user accounts need to be created within Portal; members use their existing Windows domain credentials to log in to Portal, and there is no account credential management done in Portal. In the case of AD, all user accounts are managed within AD; all the Portal administrator must do is add the enterprise users to Portal.

Groups can be created in Portal that leverage existing enterprise groups. When enterprise groups are utilized, access to Portal content for a user is controlled by the rules ...