topic Re: App Authentication with secure service in ArcGIS Runtime SDK for iOS Questions

App Authentication with secure service

SpencerLace — Tue, 07 Jun 2011 22:53:59 GMT

Hi - I'm using the ArcGIS for iOS App (not the API) to connect to our server hosting a mobile web map, which has some secure services. The "everyone" services appear in the app just fine. The secure services do prompt the user for authentication, and I enter the proper credentials (that work on the rest endpoint in a browser) but it continuously prompts for username and password. If I cancel it prompts for the next secure service. Eventually, I see the map with unsecured service(s) and the Info view shows the entire list of services in the mobile map. But I don't actually get the data of course. What could be wrong with my security configuration? I'm using ArcGIs Server 10 SP1 and iOS APP 1.8.5
Thanks,

Re: App Authentication with secure service

AaronBarkhurst — Mon, 13 Jun 2011 14:23:45 GMT

Spencer,

Were you ever able to figure this problem out? I am having the same issue and can't seem to find a solution. Is it possible that something needs to be added to the JSON text regarding username and password when adding the map in yourserver/ArcGIS/mobile?

Re: App Authentication with secure service

NimeshJarecha — Mon, 13 Jun 2011 15:39:18 GMT

Spencer,

Please provide following information, which will help diagnose the problem.

1. Are you using ArcGIS Server for .NET or Java?
2. What type of security is configured? Token or HTTP Based?
3. If token, what is the Token URL protocol? HTTPS or HTTP? You can check information by http://<host>/arcgis/rest/info
4. Is your server has SSL setup? Means, services starts with HTTPS or HTTP?

Regards,
Nimesh

Hi - I'm using the ArcGIS for iOS App (not the API) to connect to our server hosting a mobile web map, which has some secure services. The "everyone" services appear in the app just fine. The secure services do prompt the user for authentication, and I enter the proper credentials (that work on the rest endpoint in a browser) but it continuously prompts for username and password. If I cancel it prompts for the next secure service. Eventually, I see the map with unsecured service(s) and the Info view shows the entire list of services in the mobile map. But I don't actually get the data of course. What could be wrong with my security configuration? I'm using ArcGIs Server 10 SP1 and iOS APP 1.8.5
Thanks,

Re: App Authentication with secure service

PaulLohr — Wed, 03 Aug 2011 07:35:31 GMT

Not the same problem, but having a problem with secured services. This is with Server v10 with service pack 2 applied and the patch for REST security. ArcGIS for iOS is version 1.8.5 (the app, not the API).

The service is secured using tokens (SQL Server Express). The map opens through the ArcGIS Servers section of ArcGIS for iOS. The basemap layer loads, then the app switches to a view that asks for the credentials. I provide the credentials, the app hangs for a little while, then switches back to the map but never displays the secured service. Tried zooming in and out to get the secured service to load, but it never does.

I would really like to use secured services in this manner. If I can be of any help, contact me at pml at johnsoneng.com.

Thanks for any help,
Paul Lohr

Re: App Authentication with secure service

NimeshJarecha — Wed, 03 Aug 2011 15:28:46 GMT

Paul,

Please post the web map JSON (by hiding some information) so I can have a look at it and help you. Are you able to access the same service in Safari browser of the same device?

Regards,
Nimesh

Re: App Authentication with secure service

PaulLohr — Sat, 11 Dec 2021 10:48:41 GMT

Thanks for asking, Nimesh. Sorry I am late to respond.

{
  "operationalLayers": [ {
  "url": "http://domain.com/ArcGIS/rest/services/folderName/serviceName/MapServer",
  "visibility": true,
  "opacity": 1,
  "mode": 1,
  "title": "JEI WQ Locations"
  }],
  "baseMap": {
    "baseMapLayers": [{
      "opacity": 1,
      "visibility": true,
      "url": "http://services.arcgisonline.com/ArcGIS/rest/services/World_Imagery/MapServer"     
    }],
    "title": "JEI Water Quality Map"
  },
  "widgets": null,
  "version": "1.1"
}

Re: App Authentication with secure service

NimeshJarecha — Wed, 24 Aug 2011 23:04:44 GMT

No probs, Paul!

Are you seeing the problem with latest app (v2.0.1)?

You've mentioned that token based security is configured on sever. In browser, go to "http://<host>/arcgis/rest/info" with valid server name and provide information returned by server.

Regards,
Nimesh

Re: App Authentication with secure service

PaulLohr — Sat, 11 Dec 2021 10:48:44 GMT

Thanks for your quick response, Nimesh.

Server Information

Current Version: 10.02

SOAP URL: http://FTMSGIS2/arcgis/services

Secure SOAP URL: https://FTMSGIS2:443/arcgis/services

Authentication Information: 
Is Token Based Security : True
Token Service Url : https://gis2.johnsoneng.com/ArcGIS/tokens
Supported Interfaces:   REST

Re: App Authentication with secure service

NimeshJarecha — Thu, 25 Aug 2011 15:23:04 GMT

Thanks for the info...so your rest URL is http://FTMSGIS2/arcgis/rest/services and token URL is https://gis2.johnsoneng.com/ArcGIS/tokens. Is token service setup on different server?

I would suggest making them either both HTTPS based or disable requireSSL (HTTPS) from token URL.

Let me know if it works after that.

Regards,
Nimesh

Re: App Authentication with secure service

PaulLohr — Sat, 11 Dec 2021 10:48:47 GMT

Both the rest URL and token URL are on the same machine. I found that I needed the change the internal server name in rest.config to use the external domain name. I did that and enabled https on the services. Still, I am not able to access the map. I changed the services back to not requiring https since this did not work.

Here is the information from the REST info page:

SOAP URL: http://gis2.johnsoneng.com/arcgis/services

Secure SOAP URL: https://gis2.johnsoneng.com:443/arcgis/services

Authentication Information: 
Is Token Based Security : True
Token Service Url : https://gis2.johnsoneng.com/ArcGIS/tokens
Supported Interfaces:   REST

Re: App Authentication with secure service

PaulLohr — Wed, 31 Aug 2011 07:16:04 GMT

I logged a support request on the issue. Thanks anyways.

Re: App Authentication with secure service

NimeshJarecha — Wed, 31 Aug 2011 14:56:06 GMT

To enable/disable SSL, you must make changes in the web.config files under rest, services and tokens directory. Please refer help here...under topic "Secure connection (HTTPS/SSL) required for Token Service".

Also, please note that the self signed certificates are not supported with ArcGIS for iOS API.

Regards,
Nimesh

Re: App Authentication with secure service

PaulLohr — Wed, 31 Aug 2011 17:24:21 GMT

Very much appreciated, Nimesh.