ArcGIS Maps for SharePoint works directly with an ArcGIS Online organization or with an ArcGIS Enterprise instance. Although users can view the map without signing in, usage is limited to viewing and basic navigation of the map, and editing attributes in the dataset that appear in pop-ups. Signing in to ArcGIS allows ArcGIS Maps for SharePoint to connect to the platform and enable full functionality of the map.
The authentication method used to sign in is determined by the way you have set up security features for your ArcGIS Online organization or ArcGIS Enterprise instance. ArcGIS Maps for SharePoint requires no specific steps to implement the authentication methods supported by ArcGIS Online or ArcGIS Enterprise. For details about configuring the app, see Configure ArcGIS Maps for SharePoint.
ArcGIS Maps for SharePoint supports the following authentication methods for connecting to ArcGIS Online:
- Built-in accounts—Users enter their ArcGIS Online credentials. This results in the use of token-based authentication via OAuth 2.0.
- Enterprise logins—Enterprise logins are supported via Security Assertion Markup Language (SAML) 2.0. See Configure enterprise logins for more information.
For detailed information on ArcGIS Enterprise authentication, see the Administrator Guide included with the ArcGIS Enterprise installation.
- Built-in accounts—Users enter their ArcGIS Enterprise credentials. This results in the use of token-based authentication via OAuth 2.0. For ArcGIS Enterprise 10.3 and later, this is the default authentication method. See Configure ArcGIS Maps for SharePoint for more information.
- Enterprise logins—Enterprise logins are supported via SAML 2.0. The following enterprise identity providers are supported: Integrated Windows Authentication (IWA), Public Key Infrastructure (PKI), Lightweight Directory Access Protocol (LDAP), and token-based authentication. See Configure enterprise logins for more information.
If you use ArcGIS Enterprise configured with SAML, you will need to sign in to the App Configuration using a built-in user, and then change the credentials to sign in using the SAML user name and password.