Secure ArcGIS server services in public map or app

[DanSenner]

Are there any license/terms of use issues with creating web maps and app in ArcGIS online with secure ArcGIS server services and then sharing the web map and app publicly to give only colleagues that do not have a ArcGIS online account access to the maps and apps?  We have both ArcGIS server and a ArcGIS online organizational account if that matters in this process.  Any feedback on this would be helpful.

Thanks

Dan

[RebeccaStrauch__GISP]

If on the AGOL side you leave them as "public" but have them served from secured AGS services, I don't think there would be a licensing issue.  That is how I plan to do it.  But you need to have your AGS server set up as https/SSL and have a proxy and/or have the user log in to access the data.

This is in theory for me, since I haven't gone thru this process completely, but there are many discussions here, and a new page that might help

Trust | ArcGIS

I have many of these other links under my "pinned" section, and rather than include them here again...

Web AppBuilder Developer Edition - Customization Resource List

[MeleKoneya]

I am using Web App Builder with an AGOL web map.    I would like to use a Secured ArcGIS Server Map Service within the AGOL web map.   I have been working to pass in the credentials in a proxy.config file,  but have not had much luck.    The map loads in Web App Builder,  but I need to login to get to the Secured Service.

Have you had success in doing this?

Thanks,

Mele

[RebeccaStrauch__GISP]

I haven't done this, but I am using the "allowedReferers" option in my config, and from what I understand, there is no way to reference ArcGIS Online as a "Referer".  So, at this point, I have not worked on it more.

But I think others have been able to get you process to work.  These are some of the other links I mentioned are in my resource list.  I would look at the last one re: tips to start with.

• Security and Proxies:

  • ArcGIS Online Implementation Guidance—Trust ArcGIS | ArcGIS   
  • Setting up a Proxy | Support Services Blog
  • Setting up a proxy with Web AppBuilder Developer Edition | Support Services Blog
  • Using the proxy | Guide | ArcGIS API for JavaScript
  • Login prompt appearing randomly · Issue #300 · Esri/resource-proxy · GitHub 
  • Internal ONLY Web Map Sharing Issues 
    
  • Summary of ArcGIS Server SSL Issues
  • 11/28/2016 new tips  Secured feature service authentication in widget 

EDIT:  ahhh.  I keep thinking you are using the WAB Developer Edition, not strictly the AGOL version.  I haven't attempted much with he AGOL version of WAB.  We host most of our web sites locally.  Sorry if I am confusing you.  I'll leave the info I posted if anyone else needs it.

[MeleKoneya]

Rebecca,

Thanks for the resources.   It does look like the last link is what I need,  but I can't quite get over the hump.  

Just to clarify,  we are using the WAB Developer Edition hosted locally.   The WebMap is hosted on AGOL and has a ArcGIS Server Security Secured service. 

I will keep plugging away and see if the links you sent have something that I am missing.

Mele

[RebeccaStrauch__GISP]

Oh ok.  Keep reading it wrong I guess (AGOL vs AGS).    Have you tried using the LocalLayerWidget   for you ArcGIS Server services.  How do you have your proxy setup?  You may also want to look at link 3rd from the bottoms on my list above Internal ONLY Web Map Sharing Issues    My workflow (which is by no means perfect) is to only use as litle as possible on AGOL, and use the local widgets as much as possible.  I feel I can control things a little better...although I'm deep into Python right now, so my WAB brain is a bit fuzzy.

BTW - there actually are probably quite a few more threads on getting secure services to work with WAB dev edition...I probably do not have them all i the resource list.  rscheitlin  has probably answered most of these and maybe he will jump in the conversation.

[MeleKoneya]

Thanks for the further information.    I was looking at the LocalLayerWidget but what I have is an existing WAB app and would rather not have to change too much.    I know what you mean about using as little of AGOL as possible.   We have our WAB hosted locally but it still pulls the WebMap from AGOL.   In hindsight I wish I had used the LocalLayerWidget.    I will review the other links you sent.   Thanks again!

Below is my proxy.config and config.json files

  <serverUrl url="https://myserver/arcgis/rest/services/Intersectionpoints/MapServer" 
                                  username="name" 
                                  password="pwd"
                                  matchAll="true"
                                  ></serverUrl>‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

"httpProxy": {
    "useProxy": true,
    "url": "http://mymachine/proxy/proxy.ashx",
    "rules": [
      {
        "urlPrefix": "https://myserver/arcgis/rest/services/Intersectionpoints/MapServer",
        "proxyUrl": "http://mymachine/proxy/proxy.ashx"
      },
      {
        "urlPrefix": "http://maps.arcgis.com",
        "proxyUrl": "http://mymachine/proxy/proxy.ashx"
      }
    ]
  }‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

[RobertScheitlin__GISP]

Mele,

   One thing i see right off from your proxy info is the you are mixing protocols (http and https) this is not recommended. I am not sure if there is much I can add to those threads that Rebecca linked where I answered about secured services already, besides it is best that your proxy and the services are being consumed are coming from the same machine.