nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Enterprise Login with Web AppBuilder Developer

Anonymous User

I'm trying to authenticate a local custom Web AppBuilder application with our organization's enterprise login so I can keep a webmap privately shared to a group and kind of use that as the authentication to using part of the application.

I followed the advice here:

Web-tier authentication—Web AppBuilder for ArcGIS (Developer Edition) | ArcGIS for Developers

With no luck so far (I could be doing something wrong). Is it because our agency's enterprise login is through ADFS?

Any thoughts would be great. I asked Jake Skinner, he thought tagging in Robert Scheitlin, GISP and Kelly Hutchins - that you guys might have some ideas.

Do I have to build a custom login component to utilize our Enterprise Logins?

Any help would be great!! Thanks!

Encuentra más publicaciones etiquetadas con

Accepted answers

CoffeeforClosers

Hi Jessie,

Have you tried the following?

1) Add a web application item in your Portal/AGOL with the URL of your locally deployed app. This item will function as a placeholder for your locally deployed app.

2) Go into the just registered app's settings and click Register at the bottom to generate an AppId.

3) Set the redirect URI(s) to your app.

4) Copy the appId into your locally deployed app's config.json in the appId property. (see below)

5) Attempt to load the app in your browser. Do you receive an OAuth2 Modal with an Enterprise Login option rather than the ArcGIS Datastore Named User login?

<SPAN class="string token">"portalUrl"</SPAN><SPAN class="punctuation token">:</SPAN> <SPAN class="string token">"https://portal url"</SPAN><SPAN class="punctuation token">,</SPAN>
<SPAN class="string token">"appId"</SPAN><SPAN class="punctuation token">:</SPAN> <SPAN class="string token">"insert appid from registered app in portal"</SPAN><SPAN class="punctuation token">,</SPAN>‍‍‍‍<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN>

Permissions to the app using ADFS would then be scoped as to how the registered app is shared across your organization.

All comments

tigerwoulds

I cant say for sure, since I left my previous org where I had this working. But I think these were the steps

1. Create a new WAB app using WAB Dev

2. Create a new website on my IIS and get DNS configured - website should have a URL like https://mywebsite.com/appname

3. Deploy WAB app to the new website

4. Add a web application item in your Portal/AGOL with the URL of your locally deployed app. This item will function as a placeholder for your locally deployed app

5. Go into the just registered app's settings and click Register at the bottom to generate an AppId

7. Copy the appId into your locally deployed app's config.json in the appId property

6. Set the redirect URI(s) to your app. In my case it was https://mywebsite.com/appname

The redirect URLs should not be your federated or standalone GIS Server, if that's what you're trying.

ahargreaves_FW

@tigerwoulds I'm stuck at this point. I have the following setup:

WAB Dev Ed app accessing a secure map with my portal. That map has services from a federated server.
Downloaded WAB Dev Ed app, deployed onto stand alone web server.
Registered WAB Dev Ed app URL as app within portal. Copied AppID and added that into the "AppID" section of the apps config.json deployed on stand alone web server.
Redirect URIs of #3 (above) include:

However I get the same secondary request to log into my portal when clicking the registered item (#3 above) despite already being authenticated to the portal via SAML and all content being shared org wide. How do i get rid of this secondary click?

tigerwoulds

@SethLewis1 This almost works for us. After adding the app ID in the config.json I now get a popup asking to login to our portal

But when I hit OK, I get a 400 invalid redirect uri error

Any ideas?

Edit: Nevermind, figured it out by setting the redirect urls to the application's website!

Thanks so much!

DanielRoot

Seth and Jessie, thank you both! This works, reminder to leave "isWebTier": false, plug your APPID into json.config and set your Redirect in the AGOL WebApp to the exact location where your App is hosted. Works perfect!

Anonymous User

Yep - running it in localhost. Could that be my issue?

CoffeeforClosers

Jessie,

In your registered app in Portal/AGOL, under settings have you set redirect URIs to the location of your locally deployed app?

Anonymous User

Hi Seth!

I swear I had tried just this, with no luck before however I tried again, and got further than I have. (ESRI tech support told me it just couldn't be done)

I tried your solution again, and now I'm seeing a message that at least says "Sign into ArcGIS Online" - however when I click OK, I get an invalid redirect URI error message:

ArcGIS Portal Directory

Error

Invalid redirect_uri

Error: 400

Thoughts?

I have made a not so elegant hack in the main.js file in jimu/ folder to check the idenity manager against the app ID and portal URL once the config is loaded - it works but certainly would not like to upkeep changes to the jimu files

function onAppConfigChanged(_appConfig, reason){

appConfig = _appConfig;

if(reason === 'loadingPageChange'){

return;

}

//loadingCallback('jimu', resources.length + 1, resources.length);

var info = new OAuthInfo({

appId: appConfig.appId,

portalUrl: appConfig.portalUrl,

popup: false

})

IdentityManager.registerOAuthInfos([info]);

IdentityManager.checkSignInStatus(info.portalUrl + "/sharing").then(

function (){

var portal = new arcgisPortal.Portal(info.portalUrl);

portal.signIn().then(function (portalUser){

return;

})

.otherwise(function(error){

console.log("Error occurred while signing in: ", error);

IdentityManager.getCredential(info.portalUrl + "/sharing")

})

}).otherwise(function (error){

IdentityManager.getCredential(info.portalUrl + "/sharing")

});

html.setStyle(jimuConfig.loadingId, 'display', 'none');

html.setStyle(jimuConfig.mainPageId, 'display', 'block');

}

CoffeeforClosers

Hi Jessie,

Have you tried the following?

1) Add a web application item in your Portal/AGOL with the URL of your locally deployed app. This item will function as a placeholder for your locally deployed app.

2) Go into the just registered app's settings and click Register at the bottom to generate an AppId.

3) Set the redirect URI(s) to your app.

4) Copy the appId into your locally deployed app's config.json in the appId property. (see below)

5) Attempt to load the app in your browser. Do you receive an OAuth2 Modal with an Enterprise Login option rather than the ArcGIS Datastore Named User login?

<SPAN class="string token">"portalUrl"</SPAN><SPAN class="punctuation token">:</SPAN> <SPAN class="string token">"https://portal url"</SPAN><SPAN class="punctuation token">,</SPAN>
<SPAN class="string token">"appId"</SPAN><SPAN class="punctuation token">:</SPAN> <SPAN class="string token">"insert appid from registered app in portal"</SPAN><SPAN class="punctuation token">,</SPAN>‍‍‍‍<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN>

Permissions to the app using ADFS would then be scoped as to how the registered app is shared across your organization.

Anonymous User

No worries, thanks for the help Robert!

I have contacted tech support and its slow going, I didn't know if anyone in the community had experience with this. (Seems like a few of us are having this issue - how-do-i-configure-web-appbuilder-to-use-organization-login)

Again, thanks for the response!

RobertScheitlin__GISP

Jessie,

Sorry I do not have any experience with organization's enterprise login. Have you contacted tech support?

Únete a la Conversación

Los miembros registrados pueden publicar, seguir actualizaciones y más. ¿Nuevo aquí? Regístrate gratis.

Enlaces Rápidos

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.