Portal for ArcGIS access from both inside and outside the firewall

Question

This is probably a very broad question but any pointers will help.

How do you setup Portal for ArcGIS that uses Active Directory users (not in-built user store), so that you can access the maps and services from outside as well as inside the organization?

* Some maps and services should be entirely public with no named user reqs
* Some maps and services should be accessible from outside thru named user credentials
* Some maps and services are internal only

Thank you

DerekLaw · Answer

Hi Hillary,

> Are you allowed to share maps and apps to everyone from your Portal, restricting the log in on the ArcGIS Server instead of Portal Login?

In general, when you share Portal items with "everyone", then anyone who can access your intranet will be able to see and access these items. This also depends on how authentication is configured for Portal.

You could can leverage ArcGIS Server to secure web services that are referenced by web maps in Portal - so the apps and web maps are accessible, but accessing web services they reference will require a login. ArcGIS Server won't be federated with Portal.

FYI, please review this help topic:

About configuring portal authentication—Portal for ArcGIS (10.5.x) | ArcGIS Enterprise

> If not, are you able to do this using Web App Developer? Or inserting the viewing map into a website?

The same security configurations discussed in the previous answer will also apply. Web AppBuilder for ArcGIS Developer Edition follows and honors the Portal for ArcGIS security model. As when you insert a web map into a website.

Hope this helps,

HillaryBjorstrom · Answer

Are you allowed to share maps and apps to everyone from your Portal, restricting the log in on the ArcGIS Server instead of Portal Login? If not, are you able to do this using Web App Developer? Or inserting the viewing map into a website?

DerekLaw · Answer

Hi Roy,

If you have your Portal for ArcGIS configured with Windows Active Directory (AD) authentication, then only members of your Windows AD will be able to access Portal items anonymously. The general public (who are not members of your Windows AD) won't be able to access any Portal items.

When folks in your organization (who are members of your Windows AD) are "outside" your internal network, they can VPN into the network and access Portal items.

When you want to restrict access to certain Portal items, then you will need to use a named user account.

To share stuff with the general public, you could use an ArcGIS Online organization (which is included as part of ArcGIS for Desktop).

Hope this helps,