ArcGIS Server Security - Configuring Multiple Domains

3019
1
07-22-2015 06:37 AM
ShaunConway
Occasional Contributor II

Hello Everyone,

I am administering an ArcGIS Server 10.2.2 deployment in a local government setting. We currently have the server security set up to use a Windows User Store and the ArcGIS Server built in Role Store. My question is, how can I add an additional Windows User Store? Most of our users are under one domain (DomainNormalPeople) and we need to allow access for our emergency services personnel who are in another domain (DomainSuperSpecialPeople).

Can I simply just add another domain in the ArcGIS Server Administrator Directory under Security > Config > Update Identity Store? And if so, do I need to use the ArcGIS Server admin user and password or those of a user that exists on the DomainSuperSpecialPeople?

For Example:

{

  "type": "WINDOWS",

  "properties": {

    "adminUserPassword": "fakepassword",

    "adminUser": "DomainNormalPeople\\ArcGISServer"

  }

}

{

  "type": "WINDOWS",

  "properties": {

    "adminUserPassword": "fakepassword",

    "adminUser": "DomainSuperSpecialPeople\\SomeOtherUser" ????

  }

}

Thanks for your help,
Shaun

0 Kudos
1 Reply
JonUjkani
New Contributor II

HI Shaun,

to my knowledge ​you can only configure on AD/LDAP at a time with AGS. One workaround to your problem should be to enable a trust relationship between the two domains. This way when AGS queries the one AD it is connected to, it will read the other domain accounts too.

0 Kudos