An organization is configuring ArcGIS Enterprise. They want to enable a single sign-on experience for users using their existing SAML identity…

To enable a single sign-on experience using a SAML-compliant identity provider (IdP), a trust relationship must be established between the IdP and ArcGIS Enterprise. In this configuration, ArcGIS Enterprise acts as the service provider (SP). A critical step in establishing this trust is to register the portal's service provider metadata with the IdP. This metadata file contains essential information, such as the portal's entity ID and assertion consumer service URLs, which the IdP requires to authenticate users and correctly redirect them back to the portal after successful authentication.

A. Configure ArcGIS Web Adaptor to use Integrated Windows Authentication

Integrated Windows Authentication (IWA) is a web-tier authentication method for Windows environments and is distinct from the SAML protocol specified in the question.

C. Set up Lightweight Directory Access Protocol with portal-tier authentication

LDAP is a protocol for accessing directory services. While it can be used for authentication, it is not the same as configuring a federated, SAML-based single sign-on system.

D. Register the identity provider as a web-tier authenticator

SAML is configured as a portal-tier authentication method directly within the Portal for ArcGIS settings, not at the web-tier level where the ArcGIS Web Adaptor operates.

1. Esri ArcGIS Enterprise Documentation. "Configure a SAML-compliant identity provider with your portal." ArcGIS Enterprise Documentation. Accessed October 2023.

Reference Detail: In the section "Register your portal with the SAML IDP

" the documentation states: "Log in to your SAML IDP's website and use the information you obtained in the previous step to register the portal as a trusted service provider." This directly supports the action described in option B.

2. Esri ArcGIS Enterprise Documentation. "Authentication in ArcGIS Enterprise." ArcGIS Enterprise Documentation. Accessed October 2023.

Reference Detail: This document categorizes authentication mechanisms. Under the "Portal-tier authentication" section

it lists "SAML" as an option. Under "Web-tier authentication

" it lists "Integrated Windows Authentication (IWA)" and "Public key infrastructure (PKI)." This confirms that SAML is a portal-tier authenticator

making option D incorrect.