topic Re: Authentication through ArcGIS Online for customized Web Apps in Web AppBuilder Custom Widgets Questions

Authentication through ArcGIS Online for customized Web Apps

TobiasFimpel1 — Wed, 07 Jan 2015 16:23:59 GMT

This isn't directly about Widgets, but a somewhat related question: I would like to host a customized Web Application made via the javascript web app builder on my own web server, yet allow users of my organization to seamlessly authenticate through the ArcGIS Online Platform.

The ideal workflow would be: User logs into my ArcGIS Online organizational account --> finds the app item (basically a reference to the web apps URL) in a group he has access to --> gets redirected to that URL --> does NOT need to sign in again to ArcGIS Online via this dialog that opens.

I researched ESRI documentation, tried a whole lot of things related to registering apps in ArcGIS Online to get the appid etc., but can't figure it out. The Web App builder seems to be designed to provide a mechanism to do that, though, via the config.json's appid and portalurl variables. Any help would be much appreciated. Thank you!!

Re: Authentication through ArcGIS Online for customized Web Apps

RobertScheitlin__GISP — Wed, 07 Jan 2015 16:39:55 GMT

Tobias,

See if this thread helps. Re: Web AppBuilder applications now asking for users to sign in?

Re: Authentication through ArcGIS Online for customized Web Apps

TobiasFimpel1 — Wed, 07 Jan 2015 16:49:00 GMT

Thanks Robert. I do allow anonymous access to my organization that is mentioned as a workaround. Perhaps the behavior I see is still related to that issue, who knows?

The documentation here Deploy app—Web AppBuilder for ArcGIS (Developer Edition) | ArcGIS for Developers is informative (and seemingly straightforward). Do you think this is a bug and I should get in touch with ESRI? Or is it actually behaving as it should (i.e. prompting users to sing in to ArcGIS Online upon being redirected to the web app)?

Re: Authentication through ArcGIS Online for customized Web Apps

RobertScheitlin__GISP — Wed, 07 Jan 2015 17:07:25 GMT

Tobias,

I am not 100% sure. I don't use the same workflow. I have a proxy setup that handles all the secure service login stuff. I would definitely call esri tech support and get confirmation as to whether this is the intended behavior or not.

Re: Authentication through ArcGIS Online for customized Web Apps

TobiasFimpel1 — Wed, 07 Jan 2015 17:15:04 GMT

Update: I think I'm making some small progress but don't fully understand how it works.

Register your application as an item in ArcGIS Online. per this documentation ArcGIS REST API set the Redirect URI's parameters like so: (urn:ietf:wg:oauth:2.0:oob, then your app's url)

Works, kind of. User needs to click "Ok" and then "Approve" that his credentials are passed. No re-typing usernames & passwords, that's good. But two extra dialog windows is not quite as seamless as I wish it'd be.

Re: Authentication through ArcGIS Online for customized Web Apps

TobiasFimpel1 — Wed, 07 Jan 2015 17:23:57 GMT

Oh, didn't see you post until just now. With your proxy setup, do you still use ArcGIS Online for authentication purposes, or do users authenticate directly to your ArcGIS Server site? I'm asking because I'm in the process of figuring all this out for my organization (we currently have ArcGIS Server, token based security, Windows AD for identity store, and so many users that buying ArcGIS Online usernames for all of them would be pretty pricey. Yet authenticating to the ArcGIS Server map service directly looks and feels clunky and is very inconvenient on mobile devices). If you have any information to share how you use a proxy setup I'd love it. Otherwise thanks for sharing all the good web app builder widgets and knowledge with the community.

Re: Authentication through ArcGIS Online for customized Web Apps

RobertScheitlin__GISP — Wed, 07 Jan 2015 17:40:39 GMT

Tobias,

Actually the proxy (for me) works as a bypass mechanism to the authentication. My app has been setup in the proxy to go and authenticate with the secure services and work seamlessly to consume my secure services without authentication by the user. But if someone attempts to access the services without going through my app they will be challenged for authentication. This does not sound like the work flow that you are looking for though. It sounds like you want to allow access to your app based on the access level of the authenticated user.

Re: Authentication through ArcGIS Online for customized Web Apps

TobiasFimpel1 — Wed, 07 Jan 2015 18:07:31 GMT

"It sounds like you want to allow access to your app based on the access level of the authenticated user." Correct Robert, that's what I'm trying to accomplish and it is a different use case that yours. Thanks.

Re: Authentication through ArcGIS Online for customized Web Apps

RyanStrain — Mon, 02 Mar 2015 20:17:19 GMT

Robert,

Your work flow is what I would like to implement. I'm using web appbuilder 1.0 developers edition. My services and app are registered with AGOL, although on AGOL I would not like to share the items with "Everyone" or groups. And also would like to have application authentication so my users do not login. I installed the web appbuilder and designed the app on my local machine, then downloaded the application and placed it on my web server. I think I'm not setting up my proxy correctly. Can you give insight into how you've set up your proxy, such as which parameters you're using? I'm using url, oauthEndpoint, clientId, clientSecret, rateLimit, rateLimitPeriod, matchAll.

My url="http://adacountyitgis.maps.arcgis.com/".

My oauthEndpoint="https://www.arcgis.com/sharing/oauth2"

Am I missing something? Or wrong values? Or totally offbase for this setup?

Thanks,

Ryan

Re: Authentication through ArcGIS Online for customized Web Apps

shafitrumboo — Mon, 01 Jun 2015 08:21:39 GMT

I want to have same work flow but instead of using Arcgis online home page I want to use my own and list all item assigned to him

Please look at Second login prompts while authenticating arcgis online with oAuth

Re: Authentication through ArcGIS Online for customized Web Apps

AlexMahrou — Thu, 11 Jun 2015 16:53:46 GMT

What's the proper configuration for proxy.config and config.json for a self-hosted Web AppBuilder for ArcGIS Web Applica…

The above post will answer your question and provide you with some options to Build a web app builder app and deploy on-premise utlizing only your web servers authentication -- bypassing AGOL's.

Re: Authentication through ArcGIS Online for customized Web Apps

BrianO_keefe — Tue, 29 Sep 2015 21:12:22 GMT

What settings in your proxy allow this kind of access Robert? I am trying to mimic this EXACT workflow and hitting continuous roadblocks! Can you share your proxy settings? Something? I'm beyond frustrated at this point.