> For the complete documentation index, see [llms.txt](https://support.airspacelink.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://support.airspacelink.com/setup-integrations-and-customizations/setup-order-of-operations.md).

# Setup Order of Operations

{% hint style="warning" %}
The right setup order depends on two things: whether your organization uses single sign-on (SSO/SAML), and whether your Custom Web Maps are public or permissioned (secured). Find your scenario below and follow the steps in order - each step depends on the ones before it. 

SSO, Esri, and Sensor integrations require an Advanced license.
{% endhint %}

## Choose Your Scenario

Pick the combination that matches your organization, then work top to bottom.

{% tabs %}
{% tab title="SSO + secured maps" %}

1. Create the organization account. Do not assign the **Observer** user type to owners or administrators.
2. Configure and validate SSO in a test environment (do not enforce yet).
3. Add all users and operators.
4. Add the secured [Custom Web Maps](/setup-integrations-and-customizations/arcgis-online-custom-map-data-integration.md) and share them with the ArcGIS group(s) your federated users belong to, so the maps load for them in AirHub Portal.
5. Connect [Skydio Cloud](/setup-integrations-and-customizations/skydio-cloud-integration.md) (operators now exist).
6. Connect your work order integration and Drone Detection Sensors. For work orders, choose [ServiceNow Work Order (FSM)](/setup-integrations-and-customizations/servicenow-work-order-fsm-integration.md), [ServiceNow Catalog](/setup-integrations-and-customizations/servicenow-catalog-integration.md), or [Survey123 Work Requests](/setup-integrations-and-customizations/survey123-work-order-integration.md).
7. Enforce SSO by disabling native sign-in.

{% hint style="warning" %}
Validate SSO identity matching before binding secured web maps, so a re-mapped identity does not break the service permissions.
{% endhint %}
{% endtab %}

{% tab title="SSO + public maps" %}

1. Create the organization account. Do not assign the **Observer** user type to owners or administrators.
2. Configure and validate SSO in a test environment (do not enforce yet).
3. Add all users and operators.
4. Add public [Custom Web Maps](/setup-integrations-and-customizations/arcgis-online-custom-map-data-integration.md) (these can go in anytime).
5. Connect [Skydio Cloud](/setup-integrations-and-customizations/skydio-cloud-integration.md) (after operators).
6. Connect your work order integration and Drone Detection Sensors. For work orders, choose [ServiceNow Work Order (FSM)](/setup-integrations-and-customizations/servicenow-work-order-fsm-integration.md), [ServiceNow Catalog](/setup-integrations-and-customizations/servicenow-catalog-integration.md), or [Survey123 Work Requests](/setup-integrations-and-customizations/survey123-work-order-integration.md).
7. Enforce SSO by disabling native sign-in.
   {% endtab %}

{% tab title="No SSO + secured maps" %}

1. Create the organization account. Do not assign the **Observer** user type to owners or administrators.
2. Add all users and operators to AirHub Portal.
3. Provision each user's Esri login. Without SSO, users have a dual login- their AirHub Portal sign-in plus a separate ArcGIS Online or Enterprise account used to load secured maps. Create those Esri accounts and use ArcGIS **New Member Defaults** to auto-add them to the right group.
4. Add the secured [Custom Web Maps](/setup-integrations-and-customizations/arcgis-online-custom-map-data-integration.md)  and share them with that group, so users can open the maps once signed in to Esri.
5. Connect [Skydio Cloud](/setup-integrations-and-customizations/skydio-cloud-integration.md) (after operators).
6. Connect your work order integration and Drone Detection Sensors. For work orders, choose [ServiceNow Work Order (FSM)](/setup-integrations-and-customizations/servicenow-work-order-fsm-integration.md), [ServiceNow Catalog](/setup-integrations-and-customizations/servicenow-catalog-integration.md), or [Survey123 Work Requests](/setup-integrations-and-customizations/survey123-work-order-integration.md).

{% hint style="info" %}
Without SSO, the AirHub Portal account and the ArcGIS (Esri) account are separate, so users sign in twice — a "dual login" — to reach secured map content.
{% endhint %}
{% endtab %}

{% tab title="No SSO + public maps" %}
The fastest path — the only ordering that matters is operators before Skydio.

1. Create the organization account. Do not assign the **Observer** user type to owners or administrators.
2. Add all users and operators. Use **New Member Defaults** to auto-assign baseline groups.
3. Add public [Custom Web Maps](/setup-integrations-and-customizations/arcgis-online-custom-map-data-integration.md) (anytime).
4. Connect [Skydio Cloud](/setup-integrations-and-customizations/skydio-cloud-integration.md) (after operators).
5. Connect your work order integration and Drone Detection Sensors. For work orders, choose [ServiceNow Work Order (FSM)](/setup-integrations-and-customizations/servicenow-work-order-fsm-integration.md), [ServiceNow Catalog](/setup-integrations-and-customizations/servicenow-catalog-integration.md), or [Survey123 Work Requests](/setup-integrations-and-customizations/survey123-work-order-integration.md).
   {% endtab %}
   {% endtabs %}

## Why the Order Matters

A few dependencies drive every scenario above:

* **Users first.** Most integrations assume users already exist in AirHub Portal, so users and operators are added early.
* **SSO is configured early, enforced last.** Configuring before you add users lets them be provisioned once under their SSO identity, avoiding duplicate accounts you'd have to reconcile later. Enforcing (disabling native sign-in) comes last, after validation.
* **Secured web maps are gated by group membership.** A permissioned Custom Web Map is shared with one or more ArcGIS groups, and only users in those groups can load it. Two things have to line up: your users must be in the group, and the web map must be shared with that same group. With SSO, users land in the group automatically through your identity provider's group membership; without SSO, use New Member Defaults to keep them in it. This is why secured maps come after users, add them before users are provisioned and there's no one in the group yet, which creates a poor sign-in experience. Public web maps have no group dependency and can be added anytime.
* **Skydio needs operators.** Skydio Cloud only syncs post-flight logs and telemetry for operators that already exist in AirHub Portal.
* **Work orders and sensors are independent.** Neither depends on users, so they can be set up whenever convenient.

## ArcGIS Group Assignments

* **With SSO**, drive AirHub Portal group membership from your identity provider's groups, so users land in the correct groups automatically at sign-in.
* **Without SSO**, use **New Member Defaults** to automatically add every new member to a baseline set of groups.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://support.airspacelink.com/setup-integrations-and-customizations/setup-order-of-operations.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.