Latest Contributions by RobertDriessen2

Re: User name is case sensitive · ‎10-23-2018

We were having a problem adding SAML usernames into our portal. When the user went to login for the first time they would see this error: Unable to assign user 'UserName@domain' to this account '0123456789ABCDEF' , Username is not available. Note that it actually displayed 0123456789ABCDEF. The username is actually case sensitive. In ADFS the email address was capitalised on the first and last name, when we matched the case when adding the account in portal then the user had no problem logging in for the first time. ArcPortal is NOT case sensitive so it recognised the user name but when it tried to authenticate with ADFS, the case did not match and so authentication failed and the error appeared - not a helpful message.

‎08-01-2018

Hi Susmita I have tried everything to solve this problem and have not found one. This has included reverting to a single server (removing secondary portal from site) and trying to reindex. I gained the impression from ESRI that upgrading might not fix the problem. We were in the position where we could recreate the site so we did that. That meant losing all content, settings etc so not something you would do lightly. Of course that worked (new indexes). Unfortunately the problem has come back - very frustrating - so if you fix it then it might come back. So I would like to know what the impact is of the mismatch. Is it in fact a problem? And if so, what is the fix? Sorry I can't be more helpful but thought some feedback on my experience would be useful.

‎07-22-2018

This is a problem for me as well. 1. Enterprise accounts (ADFS in this case) can't be used to generate a token 2. ArcGIS accounts can be used to generate token Is there any way to generate a token using an Enterprise account?

‎06-28-2018

Thanks again Jon The site had a problem when one of the VM's was down. Worked OK if it was up and portal service not running. However, can't get into site at all now as portal is not starting up. So no, at this point, when I start the VM the portal does not work at all. I was not aware of the shutdown order (is this documented?) It could be the cause of the current problem. Our primary machine has a name like portal1 and the secondary machine has a name like portal2. Portal1 was set up as the primary site and Portal2 was added to it. To compound this Portal2 can become the primary and you need to check the admin folder to confirm. It seems random but I understand that if the primary fails then the secondary becomes primary and remains that way. Thank you for your direct email, I have responded to those requests. Your help is very much appreciated Rob

‎06-28-2018

Hi Jonathan, thanks fir your quick response. We are at 10.5.1. Stopping the secondary portal service, as suggested above, did not help so I still have an index problem. Sounds like upgrading to 10.6.1 will be the solution. Incidentally, shutting down the secondary virtual machine rendered the portal inoperative.I have since read elsewhere (one of your posts) that this is expected behavior. That is, both machines need to be up for the portal to work in high availability setup however the portal service does not need to be running on one of the machines. Am I understanding that correctly? Is there any documentation on this? Thanks again, Rob

‎06-27-2018

Is there any further information on this issue. Reindex seems to stop with search count in store set to 7529 and search count in index set to 7503. Have started reindex again with same result. Can anyone please confirm that the users' count has no direct relationship with the number of users. We don't have 64 users. I assume that means 64 user indexes? We have a pair of portal VMs so I will attempt Frasers' solution by shutting down the secondary server. Many of the items in our portal became orphans (users could not see them). However they were visible in the groups but not manageable. After indexing they also did not appear in the groups. Hopefully indexing will fix this. Thanks, Rob

‎06-06-2018

We have set up portal 10.5.1 with a federated server 10.5.1. AD FS is configured and working perfectly. Domain logins are working as expected. When setting up AD FS we followed the steps here Configure Active Directory Federation Services—Portal for ArcGIS (10.5.x) | ArcGIS Enterprise We skipped over optional step 6 which integrates domain groups with the portal. We now want to use the enterprise groups inside portal. However when I follow step 6 and supply the domain credentials exactly as specified with the following format { "type": "WINDOWS", "properties": { "isPasswordEncrypted": "false", "userPassword": "secret", "user": "mydomain\\winaccount" } } (obviously replacing secret and user details) I get the following error Portal Administrator Directory Error com.esri.arcgis.portal.admin.core.PortalException: java.lang.Exception: Could not connect to the group store. Please check the configuration and try again. Code: 500 The portal log file also contains the following <Msg time="2018-06-06T16:49:25,238" type="SEVERE" code="205008" source="Portal Admin" process="6044" thread="14" methodName="" machine="XXXXXXCorrect address for our portalXXX" user="" elapsed="">Failed to update identity store. Cannot connect to role store using supplied configuration. Verify the role store configuration is correct and try again.</Msg> Am I missing something? We have a number of domain controllers - would that be the issue? The instructions say that "In most cases, you will only need to alter values for the user and userPassword parameters." What are the options in other cases. Do I need the "WINDOWS" type as well as the "BUILTIN" type or does the "WINDOWS" type replace the "BUILTIN" type? Any help appreciated. 🙂

‎04-15-2018

Thanks Dan - I sort of expected that - especially after my fruitless searches. Some of the details further down the scripts led me to believe these documents actually existed or were available. Thanks very much for your help - much appreciated. Rob

‎04-15-2018

Hi Dan I am aware of the ArcTutor data but I couldn't find the "C:\Project" data in there. I am referring to the ArcPy training/help in ArcGIS desktop and on line. There are sample scripts and they all refer to C:\projects and I can't find that data anywhere. Here is a reference. Scroll down to the sample script. The content is the same as that appears in the help http://desktop.arcgis.com/en/arcmap/latest/analyze/arcpy-mapping/legendelement-class.htm Thanks Rob

‎04-15-2018

Through out the ArcGIS desktop documentation there are numerous sample scripts that refer to data in c:\Projects such as c:\Project\Project.mxd. Where can I find/download this data please?

‎12-21-2017

Thats a perfect and simple solution, Thanks Daniel. Much Appreciated

‎11-27-2017

Hi Jonathon I am really confused about the privatePortalURL. We are setting up high availability with portal in dmz (lets say portal1.domain and portal2.domain - they also have web adapter installed). There is a f5 loadbalancer (gis.domain) referencing portal1.domain and portal2.domain. ArcGIS server is inside the firewall (server1.domain and server2.domain (with web adapters)) and there is a load balancer for these arcgisserver.domain. We have successfully set up Active Directory on the portals. We have successfully federated the servers (via arcgisserver.domain). But once federated we can no longer access the server manager https://server1.domain:6443/arcgis/manager or https://arcgisserver.domain:6443/arcgis/manager. I get a perpetual please wait message with nothing in the logs to indicate the problem. If I unfederate then I regain access. So now I am checking everything. In this scenario should the privatePortalURL="https://gis.domain:7443/arcgis" (address to f5 for portals) or privatePortalURL="https://arcgisserver.domain:7443/arcgis" (address to f5 for servers) Note we are using the same default web adapter context (arcgis) on all web adapters. Any help appreciated as we seem to have reached an impasse on this one.

‎11-23-2017

Hi Lucas Thank you for your post. Its the only thing I have found that comes close to solving my problem. I am getting the exact same problem of not being able to access server manager after federation. I even get a log message which includes "If the service URL is a proxy URL verify it is accessible to clients". I am having a frustrating time trying to solve this. Have you had a response from ESRI regarding your 2 points? We have two portals joined together in primary/secondary failover mode. Web adapters are on both servers but arcgis is the only site on these servers (so I assume that would make it default anyway). However we do have a f5 load balancer which directs traffic to the primary server if it is up or the secondary server if it is down. I am trying to work out if you fix applies to the load balancer or the servers with the web adapters? Thanks again, Rob

‎08-27-2017

Hi Kevin No I didn't get a work around. We ended up setting up a brand new portal site and the second portal successfully joined. It didn't matter much in our circumstance as the first site was only recently setup and used as a test environment. So I didn't get to the bottom of it. However I did notice later that some of the more obscure required ports were not open on both servers so I wondered whether that was the cause? Hope that helps. Interested to hear if you get a solution. Rob

‎08-27-2017

Thank you Sebastian, that worked perfectly. Much appreciated

Online Status	Offline
Date Last Visited	‎04-24-2025 06:28 PM

My Ideas

Latest Contributions by RobertDriessen2

Re: User name is case sensitive

Re: Portal 10.5 Index Mismatch (search)

Re: ArcGIS Portal REST: Which token dispenser to use to access secure map services?

Re: Portal 10.5 Index Mismatch (search)

Re: Portal 10.5 Index Mismatch (search)

Re: Portal 10.5 Index Mismatch (search)

How to configure group access when using AD FS as the enterprise identity provider with Portal for ArcGIS

Re: Where is C:\Project\Project.mxd?

Re: Where is C:\Project\Project.mxd?

Where is C:\Project\Project.mxd?

Re: Specify TimeZone for popups/attributes in arcgisonline maps

Re: Registering server with Portal prior to federation?

Re: Unable to log into ArcGIS Server Manager after Federating

Re: Join existing portal error - Failed to update the indexes

Re: Unfederate ArcGIS Server site that no longer exists

Re: User name is case sensitive

Re: Portal 10.5 Index Mismatch (search)

Re: Portal 10.5 Index Mismatch (search)

Re: ArcGIS Portal REST: Which token dispenser to u...

How to configure group access when using AD FS as ...