topic Re: Secured map service has problem. in ArcGIS Enterprise Questions

Secured map service has problem.

anjelinaponkerat — Fri, 04 Apr 2014 11:48:07 GMT

Hi
I have 20 map services, 10 map services are secured and 10 map services are not secured. When I lunch my flex application the authentication box shown 10 times and user should write user name and password 10 times. What should I do?
Best regards

Re: Secured map service has problem.

WilliamCraft — Fri, 04 Apr 2014 12:24:04 GMT

Which version of ArcGIS for Server are you using? Which of these identity store configurations are you using for users and for roles?

Re: Secured map service has problem.

anjelinaponkerat — Fri, 04 Apr 2014 15:56:43 GMT

Which version of ArcGIS for Server are you using? Which of these identity store configurations are you using for users and for roles?

I,m using ArcGIS Server 10.2 and I,m using "Users and roles from ArcGIS Server's built-in store".

Re: Secured map service has problem.

anjelinaponkerat — Sat, 05 Apr 2014 15:46:24 GMT

Which version of ArcGIS for Server are you using? Which of these identity store configurations are you using for users and for roles?

I,m wait...

Re: Secured map service has problem.

WilliamCraft — Sat, 05 Apr 2014 16:37:21 GMT

Once you enter the credentials for a user who is part of a role that has access to the services, does everything work correctly from there for the remainder of your session? Are you authenticating users at the GIS tier or Web tier (via web adaptor)? Flex clients, like other REST applications, must be capable of providing a token to access the services that require a token. In most cases, it will not be appropriate to embed the user name and password for the service into the client-side JavaScript. Instead, a long-lived token can be obtained from the token server, and this token can be included in the client-side page. The token is then included in the request for the service. Are you passing a GIS token via the application?

Source: http://resources.arcgis.com/en/help/main/10.2/index.html#/Accessing_ArcGIS_token_secured_web_services/0154000005r3000000/

Re: Secured map service has problem.

anjelinaponkerat — Sat, 05 Apr 2014 18:25:54 GMT

Once you enter the credentials for a user who is part of a role that has access to the services, does everything work correctly from there for the remainder of your session? Are you authenticating users at the GIS tier or Web tier (via web adaptor)? Flex clients, like other REST applications, must be capable of providing a token to access the services that require a token. In most cases, it will not be appropriate to embed the user name and password for the service into the client-side JavaScript. Instead, a long-lived token can be obtained from the token server, and this token can be included in the client-side page. The token is then included in the request for the service. Are you passing a GIS token via the application?

Source: http://resources.arcgis.com/en/help/main/10.2/index.html#/Accessing_ArcGIS_token_secured_web_services/0154000005r3000000/

When I enter the credential once just one map service shown and if I dont enter other credentials< other map services dont show on the web application.

My web address is: https://****.com and when I generate token for my https it dont work for me and flex application ask user name and password again!!

Re: Secured map service has problem.

WilliamCraft — Sat, 05 Apr 2014 18:41:53 GMT

There is a difference between securing services and using SSL (e.g., HTTPS), although best practice is to use them in conjunction with one another in many cases. I am thinking that the services keep asking for authentication because no token is being passed from the Flex application. If you're telling me that you're unable to actually generate a token using an HTTPS URL referrer, then you may have an incorrect configuration of SSL for ArcGIS for Server and/or for your Web Adaptor. If you're using SSL, you need to configure your ArcGIS for Server site under the Security section of the Administrator Directory to "HTTP and HTTPS" or "HTTPS Only" (security > config > update). Did you bind a security certificate to port 443 in IIS on the GIS and/or web server(s) such that the certificate uses the fully-qualified domain name of the host? This can be a self-signed certificate or a CA certificate. My guess is that you have configured your site to use GIS Tier Authentication rather than Web Tier Authentication, but I just want to confirm. Can you check in the ArcGIS Server Manager? Also, when you say that generating a token "didn't work", do you get an error? Please post a screenshot.

Re: Secured map service has problem.

anjelinaponkerat — Sat, 05 Apr 2014 19:12:12 GMT

There is a difference between securing services and using SSL (e.g., HTTPS), although best practice is to use them in conjunction with one another in many cases. I am thinking that the services keep asking for authentication because no token is being passed from the Flex application. If you're telling me that you're unable to actually generate a token using an HTTPS URL referrer, then you may have an incorrect configuration of SSL for ArcGIS for Server and/or for your Web Adaptor. If you're using SSL, you need to configure your ArcGIS for Server site under the Security section of the Administrator Directory to "HTTP and HTTPS" or "HTTPS Only" (security > config > update). Did you bind a security certificate to port 443 in IIS on the GIS and/or web server(s) such that the certificate uses the fully-qualified domain name of the host? This can be a self-signed certificate or a CA certificate. My guess is that you have configured your site to use GIS Tier Authentication rather than Web Tier Authentication, but I just want to confirm. Can you check in the ArcGIS Server Manager? Also, when you say that generating a token "didn't work", do you get an error? Please post a screenshot.

H
1-My ArcGIS server has not ssl security
2- my flex application is on linux hosting service (with port 443) and my web address is htpps://***.com
3- I have 10 secured map service on arcgis server that has user and role.
4- When I generate token for my web address (https://***.com) and put in my config.xml, it dont work and flex application ask user name and password.
5- If I dont put token in config.xml the flex application ask user 10 times credential (this mean token dont work).
6- excuse me because of my bad english.

Regards

Re: Secured map service has problem.

WilliamCraft — Sat, 05 Apr 2014 19:37:58 GMT

Ok, are you implying that the Flex web app is hosted on a different machine than your ArcGIS for Server services? You still haven't said if you're using the Web Adaptor or not, and you still haven't stated whether your ArcGIS Server Manager indicates GIS Tier or Web Tier for the authentication type. One thing that could be an issue is your cross domain policy. To access data from a different server other than the one hosting your Flex application, the remote server needs to have a cross-domain file in the root directory. It may be worth checking the crossdomain.xml file on your ArcGIS for Server machine (and clientaccesspolicy.xml file on your web server if using the Web Adaptor) to ensure they are not blocking requests for your resources (services). I am not sure if this is the problem or not, as it has been tough to understand your configuration up to this point. However, you may want to consider opening a ticket with Esri Support.

Re: Secured map service has problem.

anjelinaponkerat — Sun, 06 Apr 2014 05:32:51 GMT

Ok, are you implying that the Flex web app is hosted on a different machine than your ArcGIS for Server services? You still haven't said if you're using the Web Adaptor or not, and you still haven't stated whether your ArcGIS Server Manager indicates GIS Tier or Web Tier for the authentication type. One thing that could be an issue is your cross domain policy. To access data from a different server other than the one hosting your Flex application, the remote server needs to have a cross-domain file in the root directory. It may be worth checking the crossdomain.xml file on your ArcGIS for Server machine (and clientaccesspolicy.xml file on your web server if using the Web Adaptor) to ensure they are not blocking requests for your resources (services). I am not sure if this is the problem or not, as it has been tough to understand your configuration up to this point. However, you may want to consider opening a ticket with Esri Support.

Hi
1-I,m using web adaptor.
2-I dont know what is tier.

Re: Secured map service has problem.

JillHalchin — Tue, 05 Aug 2014 14:24:52 GMT

The Flex viewer is going to require your users to log on to each secured service separately, 10 times in your case. The only way to avoid this is to publish a single secured service that contains all of the layers. That way, users log on only once.