topic Enterprise Login with Web AppBuilder Developer in ArcGIS Web AppBuilder Questions

Enterprise Login with Web AppBuilder Developer

Anonymous User — Thu, 08 Aug 2019 13:06:42 GMT

I'm trying to authenticate a local custom Web AppBuilder application with our organization's enterprise login so I can keep a webmap privately shared to a group and kind of use that as the authentication to using part of the application.

I followed the advice here:

Web-tier authentication—Web AppBuilder for ArcGIS (Developer Edition) | ArcGIS for Developers

With no luck so far (I could be doing something wrong). Is it because our agency's enterprise login is through ADFS?

Any thoughts would be great. I asked Jake Skinner, he thought tagging in Robert Scheitlin, GISP and Kelly Hutchins - that you guys might have some ideas.

Do I have to build a custom login component to utilize our Enterprise Logins?

Any help would be great!! Thanks!

Re: Enterprise Login with Web AppBuilder Developer

RobertScheitlin__GISP — Fri, 09 Aug 2019 12:40:50 GMT

Jessie,

Sorry I do not have any experience with organization's enterprise login. Have you contacted tech support?

Re: Enterprise Login with Web AppBuilder Developer

Anonymous User — Fri, 09 Aug 2019 12:49:00 GMT

No worries, thanks for the help Robert!

I have contacted tech support and its slow going, I didn't know if anyone in the community had experience with this. (Seems like a few of us are having this issue - how-do-i-configure-web-appbuilder-to-use-organization-login)

Again, thanks for the response!

Re: Enterprise Login with Web AppBuilder Developer

SethLewis1 — Sat, 11 Dec 2021 09:55:52 GMT

Hi Jessie,

Have you tried the following?

1) Add a web application item in your Portal/AGOL with the URL of your locally deployed app. This item will function as a placeholder for your locally deployed app.

2) Go into the just registered app's settings and click Register at the bottom to generate an AppId.

3) Set the redirect URI(s) to your app.

4) Copy the appId into your locally deployed app's config.json in the appId property. (see below)

5) Attempt to load the app in your browser. Do you receive an OAuth2 Modal with an Enterprise Login option rather than the ArcGIS Datastore Named User login?

"portalUrl": "https://portal url",
"appId": "insert appid from registered app in portal",‍‍‍‍‍‍

Permissions to the app using ADFS would then be scoped as to how the registered app is shared across your organization.

Re: Enterprise Login with Web AppBuilder Developer

Anonymous User — Thu, 15 Aug 2019 12:33:03 GMT

Hi Seth!

I swear I had tried just this, with no luck before however I tried again, and got further than I have. (ESRI tech support told me it just couldn't be done)

I tried your solution again, and now I'm seeing a message that at least says "Sign into ArcGIS Online" - however when I click OK, I get an invalid redirect URI error message:

ArcGIS Portal Directory

Error

Invalid redirect_uri

Error: 400

Thoughts?

I have made a not so elegant hack in the main.js file in jimu/ folder to check the idenity manager against the app ID and portal URL once the config is loaded - it works but certainly would not like to upkeep changes to the jimu files

function onAppConfigChanged(_appConfig, reason){

appConfig = _appConfig;

if(reason === 'loadingPageChange'){

return;

}

//loadingCallback('jimu', resources.length + 1, resources.length);

var info = new OAuthInfo({

appId: appConfig.appId,

portalUrl: appConfig.portalUrl,

popup: false

})

IdentityManager.registerOAuthInfos([info]);

IdentityManager.checkSignInStatus(info.portalUrl + "/sharing").then(

function (){

var portal = new arcgisPortal.Portal(info.portalUrl);

portal.signIn().then(function (portalUser){

return;

})

.otherwise(function(error){

console.log("Error occurred while signing in: ", error);

IdentityManager.getCredential(info.portalUrl + "/sharing")

})

}).otherwise(function (error){

IdentityManager.getCredential(info.portalUrl + "/sharing")

});

html.setStyle(jimuConfig.loadingId, 'display', 'none');

html.setStyle(jimuConfig.mainPageId, 'display', 'block');

}

Re: Enterprise Login with Web AppBuilder Developer

SethLewis1 — Thu, 15 Aug 2019 14:59:33 GMT

Jessie,

In your registered app in Portal/AGOL, under settings have you set redirect URIs to the location of your locally deployed app?

Re: Enterprise Login with Web AppBuilder Developer

Anonymous User — Thu, 15 Aug 2019 15:08:01 GMT

Yep - running it in localhost. Could that be my issue?

Re: Enterprise Login with Web AppBuilder Developer

Anonymous User — Thu, 15 Aug 2019 17:28:10 GMT

Wahhooo! Thank you Seth Lewis‌... I realized when I registered my app, I used the full address:

http://localhost/testing2/index.html

When I registered the redirect URI for:

http://localhost/testing2

It works! It was trying to hit the jimu/oauth-callback.html and was having issues with that redirect.

THANK YOU SO MUCH!!!

*** edit ***

For others that might be running into this issue, this is what works for me:

1) Add a new application in AGOL and set as Web Mapping

2) Actually make sure that isWebTier is set to false in the config. This is counter to what I read here:

Web-tier authentication—Web AppBuilder for ArcGIS (Developer Edition) | ArcGIS for Developers

Anyhoo, glad it works! Thanks again for the help!

Re: Enterprise Login with Web AppBuilder Developer

DanielRoot — Mon, 14 Oct 2019 18:38:26 GMT

Seth and Jessie, thank you both! This works, reminder to leave "isWebTier": false, plug your APPID into json.config and set your Redirect in the AGOL WebApp to the exact location where your App is hosted. Works perfect!

Re: Enterprise Login with Web AppBuilder Developer

tigerwoulds — Sat, 08 May 2021 10:06:29 GMT

@SethLewis1 This almost works for us. After adding the app ID in the config.json I now get a popup asking to login to our portal

But when I hit OK, I get a 400 invalid redirect uri error

Any ideas?

Edit: Nevermind, figured it out by setting the redirect urls to the application's website!

Thanks so much!

Re: Enterprise Login with Web AppBuilder Developer

ahargreaves_FW — Tue, 23 Nov 2021 18:59:40 GMT

@tigerwoulds I'm stuck at this point. I have the following setup:

WAB Dev Ed app accessing a secure map with my portal. That map has services from a federated server.
Downloaded WAB Dev Ed app, deployed onto stand alone web server.
Registered WAB Dev Ed app URL as app within portal. Copied AppID and added that into the "AppID" section of the apps config.json deployed on stand alone web server.
Redirect URIs of #3 (above) include:

However I get the same secondary request to log into my portal when clicking the registered item (#3 above) despite already being authenticated to the portal via SAML and all content being shared org wide. How do i get rid of this secondary click?

Re: Enterprise Login with Web AppBuilder Developer

tigerwoulds — Sun, 03 Mar 2024 23:28:07 GMT

I cant say for sure, since I left my previous org where I had this working. But I think these were the steps

1. Create a new WAB app using WAB Dev

2. Create a new website on my IIS and get DNS configured - website should have a URL like https://mywebsite.com/appname

3. Deploy WAB app to the new website

4. Add a web application item in your Portal/AGOL with the URL of your locally deployed app. This item will function as a placeholder for your locally deployed app

5. Go into the just registered app's settings and click Register at the bottom to generate an AppId

7. Copy the appId into your locally deployed app's config.json in the appId property

6. Set the redirect URI(s) to your app. In my case it was https://mywebsite.com/appname

The redirect URLs should not be your federated or standalone GIS Server, if that's what you're trying.

Re: Enterprise Login with Web AppBuilder Developer

ahargreaves_FW — Wed, 24 Nov 2021 20:02:42 GMT

Thanks @tigerwoulds but no luck. ESRI tech support are on this now and I'll update here when I have an answer.

Re: Enterprise Login with Web AppBuilder Developer

Den-GIS — Fri, 10 Dec 2021 23:43:50 GMT

Hi ahargreaves_FW

I have the same problem. It would be great if you could post ersi's answer