topic Re: Can't access secure role based map service in ArcGIS Explorer Questions

Can't access secure role based map service

KasperLiden_Kjaerbo — Tue, 06 May 2014 11:15:06 GMT

I can't access secure map services from our ArcGIS Server, that has role based access enabled, via the Explorer for ArcGIS. When accessing the services via a web map in a browser I experience no problems.

Is this a bug in Explorer for ArcGIS? Or is there a way to fix it?

- Kasper

Re: Can't access secure role based map service

NickBlack — Wed, 07 May 2014 08:33:49 GMT

Hi Kasper,

We're sorry to hear you're having a problem with this. Thanks for letting us know.

We'll investigate this issue and keep you updated.

Thanks,
Nick

Re: Can't access secure role based map service

NickBlack — Wed, 07 May 2014 16:29:24 GMT

Kasper,

We have verified that it is possible to access services using role-based security using Explorer; you should be presented with a credentials dialog when you open the map. What behavior are you seeing?

Please could you provide more details on your set-up? What version of server are you running, and could you give more specifics on the role and service in question.

Thanks in advance,
Nick

Re: Can't access secure role based map service

KasperLiden_Kjaerbo — Wed, 07 May 2014 18:21:21 GMT

Hi Nick,

We are using a setup where both ArcGIS Online and our on-premise ArcGIS Servers uses the same ADFS for authentication.
The roles repository is coming from our windows domain.
All communication is using SSL.
The Web Adaptor in the DMZ is set to Windows Authentication:True and no anonymous access.
The ArcGIS servers are running 10.2.

I am not presented with any dialogs. It seems to me that the loading time indicates some activity on the server, but no maps are displayed.

Thank you.

- Kasper

Re: Can't access secure role based map service

NickBlack — Thu, 08 May 2014 09:37:49 GMT

Hi Kasper,

Thanks for the extra information. We'll do some more investigation on this and see if we can reproduce this scenario.

Regards,
Nick

Re: Can't access secure role based map service

KasperLiden_Kjaerbo — Thu, 22 May 2014 10:19:11 GMT

Hi Nick,

Any news on this matter?
Are you able to reproduce the problem?
Can I provide you with more details or information on our setup?

Best regards,
Kasper

Re: Can't access secure role based map service

NickBlack — Thu, 22 May 2014 10:30:12 GMT

Hi Nick,

Any news on this matter?
Are you able to reproduce the problem?
Can I provide you with more details or information on our setup?

Best regards,
Kasper

Hi Kasper

Sorry for the delay we're still working on the environment and attempting to reproduce the issue.

I'll update the thread once we're in a position to repro.

Thanks for your patience.
Nick

Re: Can't access secure role based map service

NickBlack — Thu, 29 May 2014 10:47:29 GMT

Hi Kasper,

We've setup and environment similar to what you describe, but unfortunately we're still unable to reproduce the problem.

Is it possible for you to provide a screenshot of your ArcGIS Server Security settings?
e.g what you see at the following page:http://[server_name]/arcgis/manager/security.html

Also, please could you double check the connectivity between your device and the server in question- try to browse the server endpoint in a browser.

Thanks in advance,
Nick

Re: Can't access secure role based map service

KasperLiden_Kjaerbo — Mon, 02 Jun 2014 14:06:03 GMT

Hi Nick,

I have attached a screendump of the requested URL.

When accessing the AGS via the browser on the device, then I'm prompted for my credentials. As stated earlier, I'm not prompted when using the Explorer for ArcGIS.

If I logon to my organization on AGOL, and browse to the web map then I don't have any issues, and the map content is displayed on the map in the browser.

FYI - Matthew from support has created an incident and has been assigned to it.

Thanks,
Kasper

Re: Can't access secure role based map service

NickBlack — Mon, 02 Jun 2014 18:16:33 GMT

Thanks for the info Kasper, I will let Matthew take it from here. Sorry I couldn't resolve this issue for you.

Regards,
Nick

Re: Can't access secure role based map service

jaysistoza — Fri, 27 Jun 2014 22:31:01 GMT

Hello,
Has this issue been resolved? If so, could you please post a resolution.
Thanks,
Jay

Re: Can't access secure role based map service

KasperLiden_Kjaerbo — Tue, 01 Jul 2014 12:41:28 GMT

The problem is that we are using the web tier to authenticate users against our AD. ESRI pointed me to this article which emphasizes the use of web tier authentication for ArcGIS Server: http://doc.arcgis.com/en/arcgis-online/reference/arcgis-server-services.htm
The fifth paragraph down says that web tier authentication is not supported. We are able to access the secured service using ArcGIS Online on your desktop computer and on the iPad browser; this does work since we are in our network and the browsers are claims-aware, but it is not supported or recommended, as the services should not work outside the network!?!

I really don't see why this should be an issue - not from a security point of view anyway. I think it's merely because the ESRI products are not claims-aware... So, go fix!

The reason behind our setup is to avoid double user administration and an annoying popup dialog requesting credentials. From what ESRI is saying we are not able to achieve that - I thought that was the definition of enterprise login, and the login could happen on any network in any application using our enterprise credentials!?!

It's very frustrating that we can't use our credentials while in the field using the Collector or Explore...

- Kasper