Utiliser l'authentification Windows intégrée avec votre portail : 2 domaines ou plus

angelotroiano2

Bonjour,
nous devons configurer l'intégration avec l'authentification Windows de Portal for ArcGIS 10.6.1 avec 2 domaines ou plus en même temps (c'est-à-dire que la configuration doit prendre en compte 2 configurations de domaine ou plus)
Il n'y a aucune indication dans la documentation que 2 domaines ou plus peuvent être configurés :
https:\/\/enterprise.arcgis.com\/en\/portal\/10.6\/administer\/windows\/use-integrated-windows-authentication-with-your-portal.htm<\/A><\/P>

s'agit-il de 2 domaines distincts ne faisant pas partie de la même forêt ?<\/P>

Pouvez-vous nous dire si cela est possible ?
merci Angelo<\/P>

 <\/P>

ps <\/P>

DeanMoiler

Hi Angelo,

Not too long ago we had a similar situation with new partners operating with multiple forests trying to access the same portal

It was technically possible to configure, given there was appropriate trust being configured between the forest/domains and using the GC's in each, but Portal would constantly complain that this was not happy about it in the logs.

The documentation used to indicate as such, though it now appears to be missing, but this is what it said:

Perhaps this is not the case any longer, but would be worth confirming with Esri.

When we did have it configured and working, after upgrading from 10.6.1 to 10.7.1 users in the forest for which the service account using in the Identity Store Configuration would one first load have a 60 second white screen delay when accessing the portal home page.

For this reason we migrated users to SAML and haven't looked back.

If your domains are in the same forest, I believe all they need is access to a global catalog to make IWA work.

Hope this helps!

Dean