Casino identity compliance

Encrypt Assertion —Select this option to indicate to the SAML identity provider that Portal for ArcGIS supports encrypted SAML assertion responses. Security Assertion Markup Language casino identity compliance (SAML) is an open standard to securely exchange authentication and authorization data between an enterprise identity provider and a service provider (in this case, Portal for ArcGIS ). All SAML traffic to and from Portal for ArcGIS is already encrypted by the use of HTTPS, but this option adds another layer of encryption. Enable Signed Request —Select this option to have Portal for ArcGIS sign the SAML authentication request sent to the identity provider. Signing the initial login request sent by Portal for ArcGIS allows the identity provider to verify that all login requests originate from a trusted service provider. Propagate logout to Identity Provider —Select this option to have Portal for ArcGIS use a logout URL to sign out the user from the identity provider. Enter the URL to use in the Logout URL setting. If the identity provider requires the logout URL to be signed, the Enable Signed Request option also needs to be checked. If you do casino identity compliance not provide the necessary enterprise group metadata, you can still create groups. However, membership rules will be controlled by your ArcGIS casino identity compliance Enterprise portal, not your identity store. This is a security vulnerability that can be exploited when using a computer that is easily accessible to unauthorized users or to the general public. Update profiles on sign in —Select this option to have Portal for ArcGIS update users' givenName and email address attributes if they have changed since their last login. This is selected by default. Enable SAML based group membership —Select this option to allow portal administrators to link groups in your SAML identity provider to groups created in your ArcGIS Enterprise portal.