topic Re: Android ArcGIS Collector App Cannot Authenticate with Windows Active Directory in ArcGIS Collector Questions

Android ArcGIS Collector App Cannot Authenticate with Windows Active Directory

DeanPokrajac — Wed, 07 May 2014 16:41:45 GMT

Android ArcGIS Collector App cannot authenticate with ArcGIS Server secured service Windows Active Directory users. The login form appears, but credentials do not work when entered and the login form reappears. iOS ArcGIS Collector App is able to authenticate with ArcGIS Server secured services and Windows Active Directory users just fine. Is this a known bug?

Re: Android ArcGIS Collector App Cannot Authenticate with Windows Active Directory

GISSupport3 — Wed, 23 Jul 2014 07:43:48 GMT

I also am faced by this issue.

Has anyone resolved / have an update?

PS Login worked on an iPad and not an iPhone. Failed on three different Android devices.

Thanks

Re: Android ArcGIS Collector App Cannot Authenticate with Windows Active Directory

GISSupport3 — Thu, 24 Jul 2014 06:36:19 GMT

OK, I have had a small win.

The issue was Apple and Android required the credentials to be supplied differently.

Apple -> username

Android -> UsernamE@DOMAIN

And even if it wasn't the issue it (currently) seems to work for me.

Thanks

Re: Android ArcGIS Collector App Cannot Authenticate with Windows Active Directory

AmosWachanga — Wed, 01 Oct 2014 12:25:45 GMT

Had the exact same problem on various Android devices...but following your solution, it WORKED!

‌Android -> UsernamE@DOMAIN

Thanks

Re: Android ArcGIS Collector App Cannot Authenticate with Windows Active Directory

GISSupport3 — Thu, 02 Oct 2014 02:03:05 GMT

G'day Amos!

Just a small tweak ... our names in AD are (were) not standardised.

We sometimes need a user to connect to Portal (with Integrated Windows Authentication) to see the account name being used. Some users needed to be username@DOMAIN (and combinations of) though Android needs the domain and iOS doesn't.

Re: Android ArcGIS Collector App Cannot Authenticate with Windows Active Directory

FrankPotempa — Mon, 12 Jan 2015 14:38:51 GMT

Hmm, cant seem to get it to work on our side. Im using the latest version of Portal 10.3 and Collector 10.2.7.

Interesting thing is we have ADFS hooked in and I can login to the application with the domain\user account, but upon getting prompted for the feature service credentials I tried many derivatives such as user\domain(.net and .com), domain\user and none reconcile. I see errors in the logs such as;

Failed to compute the privilege for the user 'user@.....net'. null

However this same account can access/edit the same feature service in Portal maps and iOS Collector.

I believe I had this working at 10.2.2 and 10.2.5.

thankx

Frank

Re: Android ArcGIS Collector App Cannot Authenticate with Windows Active Directory

NicholasGross — Mon, 12 Jan 2015 17:25:36 GMT

I'm having a similar issue with both Collector for ArcGIS and the new Explorer for ArcGIS on Android.

If I use the 'domain/user' format, the map loads and the secure services are simply unavailable (layer is grayed out).

If I use the 'user@domain' format, the map loads and the secure services look they're trying to work, but never finish loading. When looking at the contents screen, the secure services loading icon just keeps spinning and spinning forever.

All my secure services work fine in Portal, and used to work fine in Collector as well, not sure what changed.

Re: Android ArcGIS Collector App Cannot Authenticate with Windows Active Directory

GISSupport3 — Tue, 13 Jan 2015 01:33:30 GMT

Does the feature service appear in My Content?

Re: Android ArcGIS Collector App Cannot Authenticate with Windows Active Directory

FrankPotempa — Wed, 21 Jan 2015 16:10:04 GMT

yes the feature service shows up in Portal content if added as a item, as well as in a map made in portal when added from web or from items, additionally it works in iOS Collector without issue. In the ArcGIS server logs Im not seeing any denials of service. I do have some 443 errors in the IIS logs related to token for this particular feature however that would make sense if the login credentials are not working. I cant imagine its our configuration however possibly since this is the newest setup with 10.3 for Portal and server inside using ADFS/ AD security for collector access and token for feature service access.

Re: Android ArcGIS Collector App Cannot Authenticate with Windows Active Directory

GISSupport3 — Tue, 27 Jan 2015 04:11:26 GMT

Clutching at straws here ... sounds more like something to log with your local ESRI support

- Any user account doesn't work with Android?

- The Server and Portal are federated?

- The services and maps where upgraded to 10.3 or made in 10.3

Re: Android ArcGIS Collector App Cannot Authenticate with Windows Active Directory

FrankPotempa — Tue, 27 Jan 2015 14:34:54 GMT

Sorry to keep you waiting. It is suspenseful. So after multiple troubleshooting avenues including a support ticket to ESRI a bug was identified and a work-around was provided. The bug was just opened on Jan 23;

[ BUG-000084681 : Unable to authenticate feature service in Collector for Android when the service is using token authentication and Portal is using Active Directory Federation Service (ADFS). ]

The issue lies within the Collector code. Collector has some code that will parse the username for a backslash and parse it out as a domain\username if it has one. So basically, what is happening is that when we enter 'domain\user' as the username, it is then being parsed into a UserCredential object with 'domain' and username, without including the domain. For some reason, this still allows a token to be generated, but the token is invalid because the feature layer service doesn't know the 'user', it knows 'domain\user'.

Work around
A work around to this issue is to use the following username to log in 'domain\domain\user'. This will cause the first 'domain\' to be parsed off and set as the domain, leaving the remaining username as 'domain\user' which will allow the token to be generated and the service authenticate. It's important to note that you only need to use this variation when authenticating the services on Androids.

Although Im happy that I have a resolution to allow my users to use/ test the app it is kinda hokey and doesn't pass without question from my team and users. I'm waiting on some clarification from Tech support on the fix approach and release schedule.

Frank

Re: Android ArcGIS Collector App Cannot Authenticate with Windows Active Directory

NicholasGross — Tue, 27 Jan 2015 14:55:06 GMT

Thank you Frank, that solved my issue. Also note that this same problem is present in the new Explorer app for Android and the same work around fixed that as well.

Re: Android ArcGIS Collector App Cannot Authenticate with Windows Active Directory

FrankPotempa — Tue, 24 Feb 2015 17:21:17 GMT

I wanted to add the final information/ clarification to this discussion I received from the ESRI tech;

"While I am not in development and I am just relaying this information, this is what I can tell you. The bug logged is with the Collector for ArcGIS API. Development has stated that they will be fixing the issue in the Collector API for the next time they integrate the API into the Collector application. The new, 10.3 version of the Collector app will not have the new API integrated so it will not be fixed in that release. This indicates that for the time being, to use the work around provided. "

Re: Android ArcGIS Collector App Cannot Authenticate with Windows Active Directory

Lake_Worth_BeachAdmin — Mon, 03 Jul 2017 14:20:05 GMT

Thanks, I was having same issue but the workaround seemed to have fixed it for now.