security requirements: date and time of last login and failed logins

Question

Hello,

Is it possible for Portal for ArcGIS to show some data related to his access, when a user logs in using popup or similar; for example, date and time of last login, if there were failed logins and acceptance of the organization's information management policy?

It is a requirement of secure development and secure access of web applications that is required in the project. We work with several enterprise versions 10.9.1 and 11.3 (being migrated these weeks).

Are these new security-related requirements taken into account in Portal for ArcGIS development roadmap?What security enhancement options for access, password management, etc???. Will security enhancements be made to the product?

geopamplona · Answer

I understand that tools are available individually, but not in an integrated and coherent way for an end user; they are available for an administrative user with a lot of knowledge of infrastructure.

The result I want to arrive at would be the following:

https://www.windowscentral.com/how-display-last-sign-information-during-logon-windows-10

RClavero · Answer

Hello @geopamplona, to determine the date and time of the last login you could use this script using the ArcGIS API for Python, and you might also find this ArcGIS Idea relevant. To monitor failed logins you can check the portal logs (see the documentation).

You will find more specifics on Esri software security in the ArcGIS Trust Center. You can review the ArcGIS Enterprise Hardening Guide for a detailed security best practice guide for ArcGIS Enterprise.

You might also want to contact your local distributor for additional information.