topic Re: High Availability ArcGIS Server and Portal federated and using ADFS for authentication in High Availability and Disaster Recovery Questions

High Availability ArcGIS Server and Portal federated and using ADFS for authentication

emisdev2dev2 — Fri, 19 May 2017 20:07:28 GMT

we are planning to have HA Arcgis Server/Portal/data store, they will be federated and for authentication we will use ADFS

We are having hardware NLB

Now my question is do we have to install Web Adapter on portal or arcgis server ?

We feel adding Web adapter will add one extra layer without any advantage?

Re: High Availability ArcGIS Server and Portal federated and using ADFS for authentication

DerekLaw — Fri, 19 May 2017 20:20:02 GMT

Hi emisdev2 dev2,

In this scenario, installing the ArcGIS Web Adaptor is optional for both Portal and the GIS Server.
Please see these help topics:

Hope this helps,

Re: High Availability ArcGIS Server and Portal federated and using ADFS for authentication

AzinSharaf — Thu, 20 Jul 2017 01:07:53 GMT

Hi dlaw-esristaff

But we do need Web Adaptor if we use IWA in Portal and federated Server. correct?

Re: High Availability ArcGIS Server and Portal federated and using ADFS for authentication

DerekLaw — Thu, 20 Jul 2017 04:39:37 GMT

Hi Azin,

> But we do need Web Adaptor if we use IWA in Portal and federated Server. correct?

Yes. Please review this help topic,

Use Integrated Windows Authentication with your portal—Portal for ArcGIS (10.5.x) | ArcGIS Enterprise

Hope this helps,

Re: High Availability ArcGIS Server and Portal federated and using ADFS for authentication

RebeccaStrauch__GISP — Thu, 20 Jul 2017 14:57:58 GMT

From everything I have read and heard, you must have one and only one web adapter associated with Portal. And, just fyi, if you federate, Portal takes over all the security for ArcGIS Server, therefore if you have multiple web adaptors for Server, those a no longer in play.

ArcGIS Web Adaptor is a required component of Portal for ArcGIS which allows you to integrate your portal with your existing web server and your organization's security mechanisms. You cannot deploy Portal for ArcGIS in your organization without the Web Adaptor.

from About the ArcGIS Web Adaptor—Installation Guides (10.5) | ArcGIS Enterprise

Re: High Availability ArcGIS Server and Portal federated and using ADFS for authentication

JonathanQuinn — Thu, 20 Jul 2017 17:07:49 GMT

FYI, you can have two web adaptors in an HA environment, as long as you have a Web Context URL defined.

Deployment scenarios for a highly available ArcGIS Enterprise—Portal for ArcGIS (10.5.x) | ArcGIS Enterprise

I think it's more accurate to say you can only have one entry point to your Portal, however that's defined, (load balancer, reverse proxy, web adaptor, etc)

I also think that multiple web adaptors for Server can be configured, but only the one that's used as the services URL can be used to access secure services. Additional ones can probably be used to access services shared with everyone, (as there's trust defined between Server and Portal based on the services URL, and Portal won't know about the other web adaptors). Only a theory, I'll try to test that if I have time.