nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

using secure ArcGIS Server services

JörgMoosmeier

Hi all,

I have setup my AGS with SQL-Server/Token based security. Works just fine within the REST directory and ArcGIS Desktop.
I'm having trouble using a secure service in ArcGIS.com (adding in My content) or accessing the secure service in ArcGIS.com Viewer or Explorer Online.
Is it possible at all to use secure services (either Token based or HTTP basic/digest) in ArcGIS.com and these viewers?

Thank you
Joerg

Trouver plus de publications taguées avec

Accepted answers

All comments

MikeMinamiP1

The first thing I check is whether the token endpoint is visible externally.

http://<Server>/ArcGIS/rest/info

Check that the Token Service URL is accessible externally. If not, you need to edit the web.config files, located here for IIS.

C:\inetpub\wwwroot\ArcGIS\rest\web.config
C:\inetpub\wwwroot\ArcGIS\Tokens\web.config

Also, to connect in ArcGIS Online, it must be SSL enabled with a valid certificate.

Once you get it configured correctly, try to generate a token

https://<server>/ArcGIS/Tokens/gettoken.html

hope this helps,

Mike

AnthonyMyers

I am having the same issue with ArcGIS server 10.1. I also discovered that a named instance other than arcgis "www.yourdomain.com/arcgis" will cause token generation from the REST page to fail.

JonFisher

We still have this problem as well. Back in April Mike indicated to me (offline) that in my case the problem was that our ArcGIS Server certificate was from Network Solutions, which arcgis.com has trouble with. There was a fix planned for either July or October depending on how things went.

Now when I try to add a secure map service, after logging in I get an error message that says "Unable to access the authentication service." I'm not sure if the same underlying certificate problem applies or if there's something new going on.

Jon

MikeMinamiP1

Adi,

Can you give me access to your server?

Thanks,

Mike

AYounas

Hi Mike,

I am having the same issue and sent a request in private message. Will you please check and reply.

Thanks,

Adi

EnvironmentalScienceServicesIn

Ever find a solution to this? I'm having the exact same problem.

10.1 server

MikeMinamiP1

Jon,

Can you give me access to your service? You can send me a private message to do so.

Thanks,

Mike

JonFisher

I'm having the same problem (when I add a secure map service from ArcGIS Server, it won't accept my credentials). This used to work for me, so I'm wondering if some of the recent changes in AGO may have broken the functionality? We're running ArcGIS Server 10.01. While setting up a token and then securing the resulting web map works, the downside for me is that our secure services let users authenticate against our active directory (meaning that any staff member of my organization can view the map after logging in), whereas a secure AGO map requires everyone who needs access to it to create an account with arcgis.com and be granted access to that specific map.

For an organization of over 3,000 people, it is much preferable to use our own security and have AGO just pass the credentials on rather than requiring everyone to use AGO accounts.

I should also note that I have no problem connecting to our secure services via ArcMap.

danbecker

https://domain.com/arcgis/rest/services/service1/FeatureServer <--doesn't work in AGO (never ending username/pass box) unless a token is generated and appended to the end, like so
https://domain.com/arcgis/rest/services/service1/FeatureServer?token=xyz

Used the above token method and symbolized, organized, config'd pop-ups ect in basic map viewer.

Viewed resulting json data structure of AGO map and moved it to our mobilecontent server .
After publishing the json map to mob. content server, I removed the tailing ?token= from the rest end point URL's.

Connected to/viewed map on ESRI iPad app, and got a 'sign in to view this layer' box, so I did...........and it worked!

same exact rest end point, consumed by a dif. client (ESRI app for iOS) and it works.

MikeMinamiP1

It's hard to troubleshoot why these connections are not working through the forums. My suggestion is to contact Esri technical support so that they can collect information about your configuration and possibly replicate the problem in house.

Thanks,

Mike

MikeMinamiP1

If you look at the REST endpoint of your server, it would say a version number, like 10.03, which is 10, SP3.

http://domain/ArcGIS/rest/services

Are you able to connect and view your services from ArcGIS Desktop??

Thanks,

Mike

danbecker

David, Dan,

What version of ArcGIS Server are you running? Was it working before and stopped, like maybe after you upgraded?

Thanks

Mike

mine is a brand new install (hardware bundle) from esri that we received 2 wks ago.

Not sure how to tell what SP is loaded, but I know for sure it's v10

EDIT:
just found the patchfinder.exe for identifying what SP you have...bottom of this page.

It doesn't display any SP info, just displays:

ArcGIS Server 10 - GIS services
ArcGIS Server 10 - Web Applications

So...i'm downloading/installing SP4 right now

MikeMinamiP1

David, Dan,

What version of ArcGIS Server are you running? Was it working before and stopped, like maybe after you upgraded?

Thanks

Mike

danbecker

I had the same problem today. I found that using the token parameter on my map service URL worked.

1. Create token on behalf of the user identity with Identifier set to http://www.arcgis.com
2. Include that token value on the Map Service URL that is being added to an ArcGIS.com map.

Example URL with token as a parameter:
http://arcgisserver.domain.name/ArcGIS/rest/services/mySecureService/MapServer?token=6xgjHf9MIcnI1u87Mfw4is_h4zk2hg8yniTclu9TpwMWw0e5E_3tPxDAcXsStl6hsE2Jw2T0dn1SbqxLliJzQQ..

same problem here; secured GIS service using SqlServer db for users/roles; connection to services is https through reverse proxy.
When I attempt to "add from web" and specify my secured service, I get the username/password prompt, but every user/pass I enter is invalid.

I was able to add the secured service via generating a token as mentioned above, but as soon as the token expires, we're back to square 1.

Could is be a sqlserver user/pass store is the problem? Anyone have secured services (windows auth) in AGO?

Anonymous User

I had the same problem today. I found that using the token parameter on my map service URL worked.

1. Create token on behalf of the user identity with Identifier set to http://www.arcgis.com
2. Include that token value on the Map Service URL that is being added to an ArcGIS.com map.

Example URL with token as a parameter:
http://arcgisserver.domain.name/ArcGIS/rest/services/mySecureService/MapServer?token=6xgjHf9MIcnI1u87Mfw4is_h4zk2hg8yniTclu9TpwMWw0e5E_3tPxDAcXsStl6hsE2Jw2T0dn1SbqxLliJzQQ..

MikeMinamiP1

Can anyone give me access to their server to try it out? You can send me a private notification in these forums...

Thanks,

Mike

Sage

Hi Mike,

We are running ArcGIS Server 10 service pack 3.

Sage

RyanEckdale-Dudley2

Same issue here. Running ArcGIS Server with SP2. When i try and add secure services to ArcGIS online, it prompts for User/Password. Howver, keep getting invalid username/password message. Ideas?

Ryan

MikeMinamiP1

Sage, Jarrett,

What version of ArcGIS Server are you running? Can you verify that it is version 10 sp1 or greater?

Thanks,

Mike

JarrettHandy1

i am having the same problem.

Sage

I am also having the same problem using secure services in ArcGIS.com. I can log into the rest service just fine but when I try and add the secure service into ArcGIS.com, I can not get past the login pop up window. I just says Invalid User Name/Password. I even set up a new role and user in ArcGIS Server Manager and couldn't get that one to work either. Any Ideas?

Sage

MikeMinamiP1

Matt,

Do you have any tools that can track the requests/responses being sent? For example, Firebug for Firefox, or Google Chrome has some built in tools.There may be a more verbose error message...

Or alternatively, can you provide the URL to your service and some credentials to connect to it? You can send this to me in a private message.

Thanks,

Mike

MattMerrifield

Secure ArcGIS Server services are now supported in the map when you add the layer directly to the map. From the map, click Add, then click Layer from the web. Enter the URL to the ArcGIS Server service and click OK. You'll be prompted to enter a username and password. This web map can then be referenced from a template and the user will be prompted to enter the username and password. This is supported with ArcGIS Server 10 sp1 and later.

Hope this helps,

Mike

hi Mike - I'm not sure if you are specifically referencing arcgis.com or one of the downloaded templates. The short of it is that I am unable to add secure map services to my arcgis.com map. I add the url to the rest endpoint and I am then prompted for credentials. However the credentials are failing (getting "Invalid username/password. Please try again"). I'm pretty darn sure my credentials are correct - I can successfully log in to my ArcGIS Server REST API. Any ideas?

Thanks

Matt Merrifield | GIS Manager | The Nature Conservancy

MikeMinamiP1

When did you download the template? I believe it was updated in the last month or so to include a feature that will allow a user to authenticate themselves. There is a new identity manager that does this.

http://help.arcgis.com/en/webapi/javascript/arcgis/help/jssamples/widget_identitymanager.html

Hope this helps,

Mike

danbecker

thanks mike.

However, i'm not connecting to any secure ArcGIS Server services, I just added all layers to the map via .zip shapefile. I'm trying to connect to the Arcgis.com map that i have saved, (shared with a private group) from a custom template I have on our webserver.

I understand this is accomplished with tokens but i'm not able to get it to work.

MikeMinamiP1

Secure ArcGIS Server services are now supported in the map when you add the layer directly to the map. From the map, click Add, then click Layer from the web. Enter the URL to the ArcGIS Server service and click OK. You'll be prompted to enter a username and password. This web map can then be referenced from a template and the user will be prompted to enter the username and password. This is supported with ArcGIS Server 10 sp1 and later.

Hope this helps,

Mike

danbecker

any update on this?

I have a non-public map saved on arcgis.com. i generated a token using the following url:

https://www.arcgis.com/sharing/generateToken?f=json&request=gettoken&username=MYUSERNAME&password=MYPASSWORD&Referer=MYUSERNAME

token = ttttttttttttttttttttttttttttttttttttttttt

I then found the ItemID of my non-public map. ItemID = xxxxxxxxxxxxxxxxxxxxxxxxxx

I am able to view the json using this url:
http://www.arcgis.com/sharing/content/items/xxxxxxxxxxxxxxxxxxxxxxxxxx/data?f=pjson&token=ttttttttttttttttttttttttttttttttttttttttt

I downloaded the chrome legend map template from here and installed it on our webserver:
http://www.arcgis.com/home/item.html?id=c9f1750f9b9f496ca7df16fa31870145

I can view the default webmap when pointing to our webserver's URL. If I open the template .html file and alter the webmap setting, to point to a different, publicly available map, it works great. However, when I alter the webmap setting in the .html to the following:

xxxxxxxxxxxxxxxxxxxxxxxxxx/data?f=pjson&token=ttttttttttttttttttttttttttttttttttttttttt

I get a login box, of which i enter my arcgis.com username/password, (same that was used to generate the token) and it just says 'username/password invalid'

any ideas??

thanks!

JörgMoosmeier

Mike,

thank you for the quick answer. Hopefully this will be implemented soon (together with secure services for the smartphone apps). I will go to ideas and promote this.

Joerg

AndrewPratt

I need this as well. There's no point having Groups to manage ArcGIS.com maps if I have to expose all my ArcGIS Server services to the public.

MikeMinamiP1

Unfortunately, we don't currently support access to secure services. We do have this logged as an enhancement request, but presently, there is no time frame set for when this feature will be available.

If you would like to promote this idea within the user community, go to

http://ideas.arcgis.com/ideaList?c=09a300000004xET&category=ArcGIS+Online

as we use this feedback to help set priorities.

Thanks,

Mike

Rejoindre la conversation

Les membres connectés peuvent publier, suivre les mises à jour, et plus encore. Nouveau ici ? Inscrivez-vous gratuitement.

Liens rapides

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.