<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Passive Integrated Windows Authentication w/ oAuth and ArcGIS Portal 10.4.1 in .NET Maps SDK Questions</title>
    <link>https://community.esri.com/t5/net-maps-sdk-questions/passive-integrated-windows-authentication-w-oauth/m-p/704104#M8881</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thank you for taking the time to read my post. &amp;nbsp;Please allow me to explain my&amp;nbsp;situation...&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;My company has a client that recently upgraded their ArcGIS Portal from 10.3 to 10.4.1.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;With this upgrade our client application no longer supports passive integrated windows authentication via oAuth.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Before the upgrade, our client application would passively authenticate the user via Integrated Windows Authentication by presenting the user&amp;nbsp;with a "request for permission" webpage prompting them to "approve" the application against their integrated windows domain account.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Unfortunately ever since our client upgraded their portal&amp;nbsp;from 10.3 to 10.4.1 this feature is no longer available. &amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;The users of our client application that are pointing to the new portal are forced to enter&amp;nbsp;their windows credentials rather than simply clicking a button. &amp;nbsp;Due to the nature of the end users this has become quite a concern because of the fact that some of these end users do not remember their domain credentials and this leads to erroneous user operation.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I've been working with the ArcGIS Portal Administrator at our client's office on this issue and they're saying&amp;nbsp;that something needs to be changed in our client application's code even though, it just worked automatically&amp;nbsp;before the upgrade.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;One difference they did mention was that the new portal (10.4) uses Kerberos and falls back to&amp;nbsp;NTLM as a fail safe whereas the old portal (10.3) solely used NTLM. &amp;nbsp;I'm not sure if this information is relevant but I figured it was worth sharing.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;My colleagues and I are convinced there's a new setting in ArcGIS Portal 10.4 that needs to be enabled for Passive Integrated Windows Authentication to work with oAuth&amp;nbsp;client applications but without the presence of an&amp;nbsp;on-premise portal we're limited to the existing knowledge base of the forums.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I've attached 2 screen shots showing the authentication screen before and after the portal upgrade.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Any help is greatly appreciated. &amp;nbsp;Thanks in advance.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Sincerely,&lt;/P&gt;&lt;P&gt;Dalton Mangrum&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Fri, 21 Oct 2016 21:17:26 GMT</pubDate>
    <dc:creator>DaltonMangrum</dc:creator>
    <dc:date>2016-10-21T21:17:26Z</dc:date>
    <item>
      <title>Passive Integrated Windows Authentication w/ oAuth and ArcGIS Portal 10.4.1</title>
      <link>https://community.esri.com/t5/net-maps-sdk-questions/passive-integrated-windows-authentication-w-oauth/m-p/704104#M8881</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thank you for taking the time to read my post. &amp;nbsp;Please allow me to explain my&amp;nbsp;situation...&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;My company has a client that recently upgraded their ArcGIS Portal from 10.3 to 10.4.1.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;With this upgrade our client application no longer supports passive integrated windows authentication via oAuth.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Before the upgrade, our client application would passively authenticate the user via Integrated Windows Authentication by presenting the user&amp;nbsp;with a "request for permission" webpage prompting them to "approve" the application against their integrated windows domain account.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Unfortunately ever since our client upgraded their portal&amp;nbsp;from 10.3 to 10.4.1 this feature is no longer available. &amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;The users of our client application that are pointing to the new portal are forced to enter&amp;nbsp;their windows credentials rather than simply clicking a button. &amp;nbsp;Due to the nature of the end users this has become quite a concern because of the fact that some of these end users do not remember their domain credentials and this leads to erroneous user operation.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I've been working with the ArcGIS Portal Administrator at our client's office on this issue and they're saying&amp;nbsp;that something needs to be changed in our client application's code even though, it just worked automatically&amp;nbsp;before the upgrade.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;One difference they did mention was that the new portal (10.4) uses Kerberos and falls back to&amp;nbsp;NTLM as a fail safe whereas the old portal (10.3) solely used NTLM. &amp;nbsp;I'm not sure if this information is relevant but I figured it was worth sharing.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;My colleagues and I are convinced there's a new setting in ArcGIS Portal 10.4 that needs to be enabled for Passive Integrated Windows Authentication to work with oAuth&amp;nbsp;client applications but without the presence of an&amp;nbsp;on-premise portal we're limited to the existing knowledge base of the forums.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I've attached 2 screen shots showing the authentication screen before and after the portal upgrade.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Any help is greatly appreciated. &amp;nbsp;Thanks in advance.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Sincerely,&lt;/P&gt;&lt;P&gt;Dalton Mangrum&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Fri, 21 Oct 2016 21:17:26 GMT</pubDate>
      <guid>https://community.esri.com/t5/net-maps-sdk-questions/passive-integrated-windows-authentication-w-oauth/m-p/704104#M8881</guid>
      <dc:creator>DaltonMangrum</dc:creator>
      <dc:date>2016-10-21T21:17:26Z</dc:date>
    </item>
  </channel>
</rss>

