<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic security not working on the Apps folder in ArcGIS Viewer for Silverlight Questions</title>
    <link>https://community.esri.com/t5/arcgis-viewer-for-silverlight-questions/security-not-working-on-the-apps-folder/m-p/61704#M171</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Original User: SobDan&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Hi There&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I have installed the ArcGIS Viewer for silverlight on a windows 2008 R2 server with IIS7.5. To secure the 'Builder' I am using the pre-existing windows AD groups&amp;nbsp; in my organization to authenticate users. To do this I have enabled &lt;/SPAN&gt;&lt;STRONG&gt;'IIS Windows Authentication' &lt;/STRONG&gt;&lt;SPAN&gt;and set an allow rule for a group of users from&lt;/SPAN&gt;&lt;STRONG&gt; 'ASP.NET Authorization Rules'&lt;/STRONG&gt;&lt;SPAN&gt;. This enabled Builder to ask for credentials and allow only the users from the allowed group to log in to the Builder (screenshots attached). This works perfect, no problem.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;However the same approach doesn't work when I try to secure the Apps folder and its child application. This is the folder where the Builder deploy the applications and I want only a few users from a specific group to view the applications. I user the same approach as Builder, enabled &lt;/SPAN&gt;&lt;STRONG&gt;'IIS Windows Authentication' &lt;/STRONG&gt;&lt;SPAN&gt;and set an allow rule for a group of users from&lt;/SPAN&gt;&lt;STRONG&gt; 'ASP.NET Authorization Rules'&lt;/STRONG&gt;&lt;SPAN&gt;. However, the applications does ask for credentials but let all domain users and groups log in which is the breach of the allowed rule. I am not sure where I am making a mistake as I can gurentee that the settings are same for the Builder and the App folder.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Could some one give me an idea if they have similar structure in place.&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Tue, 21 Aug 2012 01:13:21 GMT</pubDate>
    <dc:creator>Anonymous User</dc:creator>
    <dc:date>2012-08-21T01:13:21Z</dc:date>
    <item>
      <title>security not working on the Apps folder</title>
      <link>https://community.esri.com/t5/arcgis-viewer-for-silverlight-questions/security-not-working-on-the-apps-folder/m-p/61704#M171</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Original User: SobDan&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Hi There&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I have installed the ArcGIS Viewer for silverlight on a windows 2008 R2 server with IIS7.5. To secure the 'Builder' I am using the pre-existing windows AD groups&amp;nbsp; in my organization to authenticate users. To do this I have enabled &lt;/SPAN&gt;&lt;STRONG&gt;'IIS Windows Authentication' &lt;/STRONG&gt;&lt;SPAN&gt;and set an allow rule for a group of users from&lt;/SPAN&gt;&lt;STRONG&gt; 'ASP.NET Authorization Rules'&lt;/STRONG&gt;&lt;SPAN&gt;. This enabled Builder to ask for credentials and allow only the users from the allowed group to log in to the Builder (screenshots attached). This works perfect, no problem.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;However the same approach doesn't work when I try to secure the Apps folder and its child application. This is the folder where the Builder deploy the applications and I want only a few users from a specific group to view the applications. I user the same approach as Builder, enabled &lt;/SPAN&gt;&lt;STRONG&gt;'IIS Windows Authentication' &lt;/STRONG&gt;&lt;SPAN&gt;and set an allow rule for a group of users from&lt;/SPAN&gt;&lt;STRONG&gt; 'ASP.NET Authorization Rules'&lt;/STRONG&gt;&lt;SPAN&gt;. However, the applications does ask for credentials but let all domain users and groups log in which is the breach of the allowed rule. I am not sure where I am making a mistake as I can gurentee that the settings are same for the Builder and the App folder.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Could some one give me an idea if they have similar structure in place.&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 21 Aug 2012 01:13:21 GMT</pubDate>
      <guid>https://community.esri.com/t5/arcgis-viewer-for-silverlight-questions/security-not-working-on-the-apps-folder/m-p/61704#M171</guid>
      <dc:creator>Anonymous User</dc:creator>
      <dc:date>2012-08-21T01:13:21Z</dc:date>
    </item>
  </channel>
</rss>

