If an ArcGIS group links to a group in the SAML Identity Provider (IDP) is owned by a SAML user who is not listed as a member of the group in the SAML assertion response, the group membership of the user fails to update.

Workaround

1. In the Home Application, edit the Group settings for all groups owned by SAML users who are not members of those groups.
2. Change the group owner to either an ArcGIS local account or a SAML user who is a member of that group.

This issue is able to be reproduced on a standalone Portal for ArcGIS (10.6.x/10.7.x) and ArcGIS Online.

Schritte zur Reproduzierung