nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Story Map Series cannot use an HTTP web page if IWA is used

RobMiller

I am working with a Portal vs. 10.3.1 that incorporates Integrated Windows Authentication and therefore only communicates through https. When a web map is shared via a Story Map Series template, the option to use a web page in one of the tabs does not work unless it is secured with https. I figure this is just a limitation at this point, but I thought I would ask to see if anybody knows of any work around to fix this mixed content issue.

Najděte více příspěvků označených jako

Accepted answers

All comments

PaulDavidson1

Rob:

I was under the impression that you could set Portal to use mixed http/https and that would allow you to use mixed content but still have IWA certifying via https?

I don't know this for a fact but am curious about it.

RobMiller

Paul,

I believe that communicating through https only is a requirement for IWA, but I am not absolutely sure about that. The documentation specifies to use this option, but I can't be sure that it is absolutely necessary. I am also curious if anybody knows this for a fact.

PaulDavidson1

Hi Rob:

Yes, that was my understanding too from reading the documentation but it was recently recommended to me to set our Portal into mixed mode so that we could share some older map services that are http only. Other work has had precedence though so I can't offer any practical experience. My recollection from the UC this past summer was that https or https/http mode was now considered best practice. I think pure https is preferred but the reality is that many legacy organizations have older http servers still active.

Hopefully, Derek Law can weigh in on this.

It seems like a substantive issue.

DerekLaw

Hi Rob and Paul,

Allow me to clarify some items mentioned in this thread:

- By default, Portal for ArcGIS is set to use HTTP/HTTPS communication - this means you can access and work with web services/content that are both HTTP and HTTPS;

- When you configure Portal for ArcGIS to use IWA authentication, then yes - it must be set to use HTTPS communication, this is a requirement and is documented in the help

Using Integrated Windows Authentication with your portal—Portal for ArcGIS (10.3 and 10.3.1) | ArcGIS for Server

> I believe that communicating through https only is a requirement for IWA, but I am not absolutely sure about that. The documentation specifies to use this option, but I can't be sure that it is absolutely necessary.

I can confirm this is necessary for Portal for ArcGIS to use IWA authentication, otherwise you may expose security holes in your Portal deployment.

Hope this helps,

Připojte se ke konverzaci

Přihlášení členové mohou přispívat, sledovat aktualizace a další. Jste tu noví? Zaregistrujte si bezplatný účet.

Rychlé odkazy

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.