ArcGis - Anyone using it

[timbo343]

So, a teacher has landed this on us without any warning - ArcGis (Learn ArcGIS)

 

I was wondering if anyone out there is using it and has managed to configure AD logins to it. It seems that their site needs to communicate back into our AD for this to work. Is is best setting up student accounts via a CSV and let the students manage their own accounts?

 

It uses SAML linking in with the following:

ADFS, NetIQ, OpenAM, Shibbaleth, SimpleSAML.php.

 

I guess if we dont use any of these, we'd have to opt for the CSV option.

Edited June 8, 2017 by timbo343

[Cache]

I've just configured this and use Azure AD from our Office 365 accounts: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-saas-arcgis-tutorial

 

Only change I made to the instructions there is Step 9 I set to allow it automatically, that way you don't need to do the last 2 parts in importing into ArcGIS and you don't need to assign it in AzureAD.

 

The only downside, which I was willing to live with and so were our staff, was that it doesn't import the surname into ArcGIS.

 

Edit: I found it easier to follow in the old AzureAD portal rather than the new one, the guide is in the old one and the steps are slightly different in the new: https://manage.windowsazure.com

Edited June 8, 2017 by Cache

[timbo343]

Many thanks for the guide on this. I've been testing this and comparing this with the CSV option and i think the teachers would prefer all student data to be listed as there's more than one student in the class with the same first name. It's a shame that the surname isn't pulled through though. I guess ArcGis use a different label for surnames and it would mean all students would have to edit their profile or we'd have to do it. If arcgis ever change the label then in future years if we are still using this we could link AzureAD accounts to this.

 

I tried accessing the last link you provided, it came up with no valid azure subscription.

 

I too have set the "Your users will be able to join" to automatically but i still have to make sure they are assigned in AzureAD otherwise it doesn't allow them access.

[Cache]

That's odd, as I made a point of testing that part of it about not assigning a licence, only extra thing I can think of is in the advanced settings part within the ArcGIS Identity part I've ticked the update profile on sign-in box, but I'm sure I did that after I'd tested it because I was trying to make the surname come through at that point. Just checked the last login and ours definitely doesn't need the licence assigning as the member of staff who requested it has signed in this morning and I've still not assigned any licences.

 

I found an Esri document somewhere saying about ADFS that it didn't pull through the surname for some reason (can't remember why and can't find the document) but from memory it just didn't allow the inbound data flow.

 

Not sure about the old portal page not working, I did access the new portal through the Office 365 portal first whether that made any difference or not?

Edited June 9, 2017 by Cache

[Cache]

@timbo343 - just been messing with something in AzureAD (although probably not best for me to admit that) and in the Enterprise Apps in the properties of ArcGIS my "Require User Assignment" option is set to no - perhaps the reason you might need to assign them is because it's set to yes? Not sure why mine is/was set to no in the first place however would explain the difference in our setup if it was the case.

[timbo343]

Thanks for the update.

 

I've been to check this on our Azure and User Assignment required is set to YES.

 

 

I decided not to use the O365 route this time and created local logins for it.

 

They have been using it and my word, it uses a lot of bandwidth - you can definitely tell when a class is on this site.