Unable to access the Portal for ArcGIS due to SAML issues with the Built-in access also being disabled

Description

Upgrading the portal using SAML can corrupt the SAML configuration and hence it is recommended to have Built-In enabled so that if anything goes wrong, the portal can be accessed to troubleshoot the SAML issue further. The following behavior has been encountered:

• While in the process of an ArcGIS Enterprise upgrade, SAML login issues are experienced.
• Error: AADSTS50011 is returned: The reply URL specified in the request does not match the reply URLs configured for the application
• To troubleshoot this error message, the identity provider must have access to Portal for ArcGIS to check the SAML configuration.
• Access was not possible, as the Built-In access to the portal was disabled for security reasons.

It is always recommended to perform the upgrade using Built-In credentials, but as both the logins are not working in this scenario, built-in access must be enabled manually.

Solution or Workaround

For Versions 10.9.1 and later

As of version 10.9.1, an enableArcgisLogins batch file has been included in the \ArcGIS\Portal\tools\security\ directory. To provide access to the portal through built-in accounts again, whether experiencing problems with the SAML identity provider or with member accounts, use following the steps.

1. Navigate to the following location on Portal for ArcGIS: \ArcGIS\Portal\tools\security\
2. Run the enableArcgisLogins batch file to re-enable the option for members to log in with their built-in ArcGIS accounts.

For Version 10.9 and prior versions

Follow the instructions found in Portal for ArcGIS Common problems and solutions: My portal uses an SAML identity provider, and I had disabled the option for members to log in with their built-in ArcGIS accounts. How do I re-enable this option?