Problem connecting to ArcGIS Enterprise 10.6.1 through Collector over VPN

997
4
04-05-2019 06:38 AM
Highlighted
New Contributor II
Since upgrading ArcGIS Enterprise to 10.6.1 we are not able to sign in to Collector on iOS. We use a VPN to connect to our network and use Portal level authentication. It looks like Collector tries to log in through an in-app Safari browser and our organization doesn't allow access to any sites using Safari and VPN. This is really puzzling to me because 1) we can connect through ArcGIS Explorer, Collector Classic and Survey123 and 2) we can connect to Collector through ArcGIS Enterprise 10.5.1.
Has anyone else experienced this issue? Does anyone have any ideas on how to fix this? Esri does not provide support for VPN configurations.
Thanks
4 Replies
Highlighted
Esri Regular Contributor

Is there any way you can see if you can rule out the VPN by accessing the 10.6.1 Enterprise setup through and internal WiFi Connection? If you have the same issue in the internal network, then it would be easier to debug the web traffic via a program like fiddler and you can compare the web traffic to Collector signing on to ArcGIS Enterprise 10.5.1.

Highlighted
New Contributor III

Hi Paul, Same here. I upgraded a customer AE base deployment test environment from 10.5.1 to 10.6.1 and it broke the authentication for ONLY the Collector for ArcGIS (IOS) using a Per-App VPN solution (airwatch). Explorer for ArcGIS still working fine as well as connecting Collector to another AE base deployment still running 10.5.1.

Highlighted
New Contributor

Hello,

We also have the same issue. I am a System Administrator in our company. I also manage our MDM solution. I believe that this issue with Collector has to do with another iOS VPN issue. There is an issue that so called iOS Web Clips fail to open/launch in fullscreen mode when using VPN/Tunnel Safari Domain rules. My guess is that Collector uses the fullscreen Web Clip in the background. For our situation i have created a workaround. I configured a non-fullscreen Web Clip which points to our company Portal for ArcGIS. This Web Clip is automatically created on our iPads. Users open the Web Clip which opens Safari. They logon to the ArcGis portal and after that they open the Collector app. Because of the SSO configuration they are automatically are logged into Collector. 

Kind regards.

Highlighted
New Contributor III

We have the situation where Survey123 doesn't authenticate via F5 VPN with iPhone managed by Microsoft Intune.   

Collector and Explorer don't have problems.   

What would Survey123 be doing different?  

Reply
0 Kudos