Verwenden Sie Integrated Windows Authentication mit Ihrem Portal: 2 oder mehr Domänen

Question

Hallo, wir müssen die Integration mit der Windows-Authentifizierung von Portal for ArcGIS 10.6.1 mit 2 oder mehr Domänen gleichzeitig konfigurieren (d.h. die Konfiguration muss 2 oder mehr Domänenkonfigurationen berücksichtigen) In der Dokumentation gibt es keinen Hinweis darauf, dass 2 oder mehr Domänen konfiguriert werden können: https:\/\/enterprise.arcgis.com\/en\/portal\/10.6\/administer\/windows\/use-integrated-windows-authentication-with-your-portal.htm<\/A><\/P>sind 2 oder mehr unterschiedliche Domänen, die sich nicht im selben Forest befinden<\/P> Können Sie uns sagen, ob das möglich ist? Danke, Angelo<\/P> <\/P> ps <\/P>

angelotroiano2 · Answer

Hello Dean

thansk a lot for your support

best regards Angelo

DeanMoiler · Answer

Hi Angelo,

Not too long ago we had a similar situation with new partners operating with multiple forests trying to access the same portal

It was technically possible to configure, given there was appropriate trust being configured between the forest/domains and using the GC's in each, but Portal would constantly complain that this was not happy about it in the logs.

The documentation used to indicate as such, though it now appears to be missing, but this is what it said:

Perhaps this is not the case any longer, but would be worth confirming with Esri.

When we did have it configured and working, after upgrading from 10.6.1 to 10.7.1 users in the forest for which the service account using in the Identity Store Configuration would one first load have a 60 second white screen delay when accessing the portal home page.

For this reason we migrated users to SAML and haven't looked back.

If your domains are in the same forest, I believe all they need is access to a global catalog to make IWA work.

Hope this helps!

Dean