
Configure the following advanced settings as applicable:.Contact your Azure AD administrator to obtain these. Enter the values manually and supply the requested parameters: the login URL and the certificate, encoded in the BASE 64 format. Parameters-Choose this option if the URL or federation metadata file is not accessible.Note:If this is the first time you're registering a service provider with Azure AD, you need to get the metadata file after registering Portal for ArcGIS with Azure AD. Register Azure AD as the enterprise IDP for your portal Portal for ArcGIS supports the inflow of a user's email address, group memberships, given name, and surname from the SAML identity provider. Any other characters will be escaped to contain underscores in the user name created by Portal for ArcGIS. The allowed characters for the value sent by NameID are alphanumeric, _ (underscore). When a user from the IDP signs in, a new user with the user name NameID will be created by Portal for ArcGIS in its user store. Since Portal for ArcGIS uses the value of NameID to uniquely identify a named user, it is recommended that you use a constant value that uniquely identifies the user. Sent by your IDP in the SAML response to make theįederation with Portal for ArcGIS work. The NameID attribute is mandatory and must be Received from the IDP when a user signs in using Portal for ArcGIS requires certain attribute information to be

To configure Azure AD with ArcGIS Enterprise, you need a premium Azure AD subscription. The configuration process involves two main steps: registering Azure AD in your ArcGIS Enterprise portal and registering Portal for ArcGIS in your Azure AD portal. You can configure it as your IDP for enterprise logins in Portal for ArcGIS on-premises and in the cloud. Microsoft Azure Active Directory (AD) is a Security Assertion Markup Language (SAML)-compliant identity provider (IDP).

Register Azure AD as the enterprise IDP for your portal.
