topic Problem setup Portal for ArcGIS with Integrated Windows Authentication in ArcGIS Online Questions

Problem setup Portal for ArcGIS with Integrated Windows Authentication

AnthonyChong — Sun, 27 Oct 2013 13:28:46 GMT

Hi,

i have been trying to setup Integrated Windows Authentication for my Portal for ArcGIS without success. Here's my configuration:

- Windows 2008 Server R2, IIS 7
- Portal for ArcGIS 10.2, unfederated, Web Adapter (IIS), default built-in users authentication

I followed the steps in the online resource:

http://resources.arcgis.com/en/help/main/10.2/index.html#/Using_Integrated_Windows_Authentication_with_your_portal/017s00000066000000/

When i login using the initial admin account via https://portal.domain.com:7443/arcgis/home, i didn't see any AD users being populated in the user list - instead i still see the same default built-in users.

Are there any logs i can check if my connection to AD is established?
Are there any settings to look out for that are not mentioned in the resources?

Thanks!

Re: Problem setup Portal for ArcGIS with Integrated Windows Authentication

TonyGegner — Tue, 29 Oct 2013 08:54:43 GMT

AD users will be listed after the first time they visit the site with SSO.

It doesnt populate every user in the AD automaticly.

Re: Problem setup Portal for ArcGIS with Integrated Windows Authentication

AnthonyChong — Tue, 29 Oct 2013 10:24:05 GMT

hi,

Just to clarify on the step for Designating a Windows account as an administrator (step 3 in particular):

Steps:
1.Open a browser and connect to your portal through port 7443, for example, https://portal.domain.com:7443/arcgis/home.
2.Sign in using the initial administrator account you created when you set up Portal for ArcGIS.
3.Find the Windows account you will use to administer your portal and change the role to Administrator. The account will appear in the format username@domain.
4.Sign out of the website.

Do you mean that i have try to login as a AD account first before i can see my AD account using my initial admin account?

Thanks!

-Anthony

Re: Problem setup Portal for ArcGIS with Integrated Windows Authentication

TonyGegner — Tue, 29 Oct 2013 13:54:33 GMT

Hi,
First you create your initial portal admin account.

Then connect to the site (https://portal.domain.com/arcgis/home) through the webadaptor with SSO.
You should be logged in automaticly with your current domain user if everything is set up correctly.

Then connect to https://portal.domain.com:7443/arcgis/home and logon as the initial portal admin account.
Now you should se your AD-user in the list and you can change account type to admin.

Re: Problem setup Portal for ArcGIS with Integrated Windows Authentication

AnthonyChong — Fri, 01 Nov 2013 09:17:33 GMT

Thanks for the reply.

When i access https://portal.domain.com/arcgis/home, I was prompted to login to my domain. I keyed in my domain id and password and click ok. It still shows me the unauthenticated home page (with the "Sign In" link on the top right). Can I say that my web adaptor (IIS) setup is not correct? I followed the steps on the resources, what else did i miss out? My Web Adaptor is not shared.

Configuring the ArcGIS Web Adaptor to use Windows authentication:
1.Start IIS Manager.
2.Access the ArcGIS Web Adaptor website in the Connections panel.

Expand <your server> > Sites > Default Web Site and click on your Web Adaptor. If you used the default name, the site is named arcgis.

3.Double-click Authentication in the Home panel.
4.Click Anonymous Authentication and click Disable.
5.Click Windows Authentication and click Enable.
6.Close IIS Manager.

Thanks!

-anthony

Re: Problem setup Portal for ArcGIS with Integrated Windows Authentication

TonyGegner — Fri, 01 Nov 2013 09:22:58 GMT

Hi,
Yes thats correct.

Have you also added the AD-configuration to the configuration file?: C:\Program Files\ArcGIS\Portal\etc\portal-config.properties
idp.type=WINDOWS
idp.ad.user=domain\\domain_user
idp.ad.userpassword=domainuser_password
idp.ad.user.fullnameattribute=cn
idp.ad.user.emailattribute=mail
idp.userpassword.encrypted=false

You can also check the log and see if you find something interesting
C:\arcgisportal\logs\webserver\catalina.<date>.log:
C:\arcgisportal\logs\webserver\localhost.<date>.log

Re: Problem setup Portal for ArcGIS with Integrated Windows Authentication

AnthonyChong — Fri, 01 Nov 2013 09:38:49 GMT

Yes. i have configured that and restarted the portal service. I went thru the link several times and quite sure i didn't miss out anything.

http://resources.arcgis.com/en/help/...0000066000000/

I also check the 2 logs you mentioned, nothing seem to indicate any authentication errors.

Not sure what else i have missed out.

Any pointers would be greatly appreciated.

Thanks.

-anthony

Re: Problem setup Portal for ArcGIS with Integrated Windows Authentication

TonyGegner — Fri, 01 Nov 2013 10:26:32 GMT

You restarted the portal service after changing authentication mode?

Re: Problem setup Portal for ArcGIS with Integrated Windows Authentication

AnthonyChong — Thu, 07 Nov 2013 13:15:18 GMT

Yes. I did.

Re: Problem setup Portal for ArcGIS with Integrated Windows Authentication

AtsuhitoNAKANO — Thu, 05 Dec 2013 15:58:33 GMT

I have also the same problem...

If it is true that we can integrate Portal with AD, please show us your success sample.

Re: Problem setup Portal for ArcGIS with Integrated Windows Authentication

JacobBoyle — Thu, 05 Dec 2013 18:11:45 GMT

I've successfully enabled AD authentication on my portal. This was one of the few steps I had little issue with throughout the setup process.

make sure you are clearing your local cache in your browser as well as restarting the portal server. I had an issue when even after being prompted to enter my user name and password, it was still loading the cached page and acted like I wasn't signed in.

Re: Problem setup Portal for ArcGIS with Integrated Windows Authentication

AtsuhitoNAKANO — Tue, 10 Dec 2013 00:54:13 GMT

I tried to clear cache and restart my portal.

But I can't.

I would like to see the successful example.

Re: Problem setup Portal for ArcGIS with Integrated Windows Authentication

JacobBoyle — Tue, 10 Dec 2013 13:16:28 GMT

I unfortunately can not share our portal, it's a private business, and security is of the utmost importance in our industry.

I would recommend contacting Esri Technical support if you have been unable to solve this on your own. Sometimes it can be the simplest of things causing your problem, and the fresh set of eyes is always helpful.

Re: Problem setup Portal for ArcGIS with Integrated Windows Authentication

RaviNarayanan — Wed, 11 Dec 2013 15:52:05 GMT

Anthony,

Please contact ESRI Tech Support if this continues to be an issue.

One question in the mean time....after updating the AD properties in C:\Program Files\ArcGIS\Portal\etc\portal-config.properties and restarting portal, do you see the encrypted password? this would indicate that that portal was able to connect to the AD store using the connection information provided.

idp.type=WINDOWS
idp.ad.user=domain\\domain_user
idp.ad.userpassword=domainuser_password
idp.ad.user.fullnameattribute=cn
idp.ad.user.emailattribute=mail
idp.userpassword.encrypted=false

Please post a sample (fake values) of the properties that were set in this file...so we can see if it looks ok.

Re: Problem setup Portal for ArcGIS with Integrated Windows Authentication

WilliamCraft — Wed, 11 Dec 2013 23:33:53 GMT

I know this may be a silly question, but have you made sure that your LDAP section in the properties file is NOT commented out and that the built-in section IS commented out before restarting the service? If you've modified the domain user account password (either at the domain level or within the properties file itself), please reset the encrypted value to 'false' before restarting the service. It will be automatically changed to 'true' and the password encrypted once the service starts back up.

Re: Problem setup Portal for ArcGIS with Integrated Windows Authentication

Gregory_L___Greg_Gunther — Wed, 07 May 2014 20:43:31 GMT

Has anyone found a solution to this for Portal 10.2? I am having the same issue.

Re: Problem setup Portal for ArcGIS with Integrated Windows Authentication

MichalGrinvald — Tue, 30 Dec 2014 08:44:11 GMT

Hi,

I get the same probkem in Portal for ArcGIS 10.3

What ever I do (with the same or a different web Adaptor for the Portal), when I try to connect with my AD account, I get the message:

"Unable to sign you in to Portal for ArcGIS".

I followed all the instructions and repeated the process 3 times and still can't enter with my AD account or any other AD account.

Thanks a lot,

Miri