The other client is a WMS client where users will access their protected services. Usually it will be ArcMap, but other WMS clients will be used too. Thats why we would like to make these services accessible over «Basic Authentication» (IIS, web-tier).
I have painted it on a graphic, would be great if anybody could help!
Here We have a similar situation, but We decided to create a different group on Portal (Group 3) for Specific Situations like WMS services for Customers connected outside the network with a exclusive user/login for then.
I don´t know yet if it´s the best solution, but it´s working for us.
Thank you very much for your input! It looks like this is the most appropriate solution for that case, I think we'll go into a similar direction.
As we need a separate entry point for the WMS users, we'll use the proxy provided by Esri to redirect their request to the portal.