topic Use IWA without Federating in ArcGIS Enterprise Questions https://community.esri.com/t5/arcgis-enterprise-questions/use-iwa-without-federating/m-p/446743#M17269 <HTML><HEAD></HEAD><BODY><P>I am working through documentation but I am unclear on how to set up our enterprise server/portal environment. Hoping for some guidance.</P><P></P><P>Currently on 10.1 with security handeld through Active Directory. We have about 1,000 users of GIS. 99% of those users are only utilizing a couple of services on our server and all of them are view only.&nbsp;</P><P></P><P>At this point I am used to securing the services but after federating the portal to the server, it looks like I need to add all 1,000 users to portal to share the resources. I did not think this was the case before I got started so now I may have to justify the added expense of user licensing. So my thought is maybe I do not federate the server and handle the service security as I have in the past. I am just trying to understand what that means for Portal moving forward. Eventually I would like to utilize portal but is IWA supported when the portal is not federated? If so how does sharing items vs service security work? I would assume that you could share an item but if they don't have service level access the service will deny access and nothing would load.</P><P></P><P>I appreciate any insight.</P></BODY></HTML> Fri, 03 Nov 2017 13:03:34 GMT BrianLeroux 2017-11-03T13:03:34Z Use IWA without Federating https://community.esri.com/t5/arcgis-enterprise-questions/use-iwa-without-federating/m-p/446743#M17269 <HTML><HEAD></HEAD><BODY><P>I am working through documentation but I am unclear on how to set up our enterprise server/portal environment. Hoping for some guidance.</P><P></P><P>Currently on 10.1 with security handeld through Active Directory. We have about 1,000 users of GIS. 99% of those users are only utilizing a couple of services on our server and all of them are view only.&nbsp;</P><P></P><P>At this point I am used to securing the services but after federating the portal to the server, it looks like I need to add all 1,000 users to portal to share the resources. I did not think this was the case before I got started so now I may have to justify the added expense of user licensing. So my thought is maybe I do not federate the server and handle the service security as I have in the past. I am just trying to understand what that means for Portal moving forward. Eventually I would like to utilize portal but is IWA supported when the portal is not federated? If so how does sharing items vs service security work? I would assume that you could share an item but if they don't have service level access the service will deny access and nothing would load.</P><P></P><P>I appreciate any insight.</P></BODY></HTML> Fri, 03 Nov 2017 13:03:34 GMT https://community.esri.com/t5/arcgis-enterprise-questions/use-iwa-without-federating/m-p/446743#M17269 BrianLeroux 2017-11-03T13:03:34Z Re: Use IWA without Federating https://community.esri.com/t5/arcgis-enterprise-questions/use-iwa-without-federating/m-p/446744#M17270 <HTML><HEAD></HEAD><BODY><P>You can use IWA with non-federated Servers in Portal as long as you add them as trusted servers so CORS requests don't fail:</P><P></P><P><A class="link-titled" href="http://server.arcgis.com/en/portal/latest/administer/linux/configure-security.htm#ESRI_SECTION1_70CC159B3540440AB325BE5D89DBE94A" title="http://server.arcgis.com/en/portal/latest/administer/linux/configure-security.htm#ESRI_SECTION1_70CC159B3540440AB325BE5D89DBE94A">Configure security settings—Portal for ArcGIS (10.5.x) | ArcGIS Enterprise</A>&nbsp;</P></BODY></HTML> Mon, 06 Nov 2017 19:33:34 GMT https://community.esri.com/t5/arcgis-enterprise-questions/use-iwa-without-federating/m-p/446744#M17270 JonathanQuinn 2017-11-06T19:33:34Z