The JSON object containing the properties listed below.

The response format. The default response value is html.

Values: html | json | pjson

This property restricts what hosts Enterprise portal can access directly. This restriction applies to several scenarios, including when the Enterprise portal accesses resources from a server that does not support Cross Origin Resources Sharing (CORS) or when saving credentials used to access a secure service. By default, this property is not defined and no restrictions are applied. Use the format (.*).domain.com to allow access to all machines within a specified domain.

Syntax: A comma-separated list of host names.

The automatic account creation flag. This determines the behavior for unregistered ArcGIS Enterprise accounts the first time they access Enterprise portal. The default value for the property is false. When set to false, first-time users are not automatically registered as members of your ArcGIS organization and must have the same access privileges as other nonmembers. For these accounts to sign in, an administrator must register the Enterprise accounts using the Create User operation. When the value is set to true, Enterprise portal will add Enterprise accounts automatically as a member of your organization.

Values: true | false

Introduced at 10.5, this property sets the level Enterprise portal automatically assigns to new accounts. Level 1 membership allows members to view content, such as maps and apps, that have been shared with them through the organization. Level 2 membership allows members to view, create, and share content.

Values: 1 | 2

This property controls whether the HTML pages of the services directory should be accessible to the users. The default value for this property is false, meaning the services directory HTML pages are accessible to everyone.

Values: true | false

Introduced at 10.4, this property sets which role Enterprise portal automatically assigns to new accounts. By default, new accounts are assigned to account_user. Other possible values are account_publisher or the ID of one of the custom roles defined in your organization. To obtain a custom role ID, sign in to the Enterprise portal sharing directory and browse to Portals > Self > Roles where you can copy the custom role ID you want to use.

Values: account_user | account_publisher | <custom role ID>

This property appends an underscore and specified suffix to new Enterprise accounts that will sign in via SAML. This applies to accounts created automatically and manually through Enterprise portal. This allows ArcGIS Enterprise user names in Enterprise portal to match corresponding Enterprise portal user names in ArcGIS Online. This is needed if editor tracking is enabled on a feature service that is edited by Enterprise portal users from both ArcGIS Online and ArcGIS Enterprise.

For example, if the defaultIDPUsernameSuffix property is specified as energy, the Enterprise user names created for SAML logins will append _energy to the user name. See the examples below:

• The user name rsanchez becomes rsanchez_energy.
• With an email address used as a user name, rsanchez becomes rsanchez@domain.com_energy.

Introduced at 10.7, this property sets the default user type assigned to users during account creation and when creating built-in accounts. These user types must be compatible with the defaultRoleForUser that has been specified.

Values: fieldWorkerUT | GISProfessionalStdUT | GISProfessionalBasicUT | GISProfessionalAdvUT | creatorUT | editorUT | insightsAnalystUT

Introduced at 10.9.1. A boolean that controls the value of the "Access-Control-Allow-Private-Network" response header in a CORS pre-flight request to a portal service URL. This was added to support the Private Network Access web specification (CORS-RFC1918), which aims to protect websites accessed over a private network from being able to make internal cross-origin (CORS) requests. The default value is true.

Values: true | false