New members with SAML logins are not automatically added to Portal for ArcGIS or ArcGIS Online groups

Description

In Portal for ArcGIS and ArcGIS Online, SAML logins allow new members to log in without creating additional credentials and they are assigned a predefined role and user type. The members can also be automatically added to the Portal for ArcGIS or ArcGIS Online groups after enabling the ‘Enable SAML based group membership’ and ‘Being a member of a SAML group’ options.

Sometimes, new members with SAML logins are not automatically added to the groups even after the options have been enabled.

Cause

The predefined role is set as Viewer and the linked groups have the ‘shared update’ group designation enabled. The Viewer role does not have sufficient privileges to join the shared update groups.

Note:
Only members of the User, Publisher, Facilitator, and Administrator default roles can join the shared update groups.

Solution or Workaround

In Portal for ArcGIS or ArcGIS Online, create groups with the Shared update designation disabled to automatically add members with the default Viewer role to the groups. Refer to Portal for ArcGIS: Create groups for more information.

If new members are required to join the shared update groups, change their default role to User, Publisher, Facilitator, or Administrator, to automatically add them to the groups after logging in. Refer to Portal for ArcGIS: Configure new member defaults for instructions and more information.

The member’s default role can also be changed after they are added to Portal for ArcGIS or ArcGIS Online. Refer to Portal for ArcGIS: Change member roles for instructions.