Accessing web application with username/password (.Net/Silverlight/Flex),

[JamalNUMAN]

Accessing web application with username/password (.Net/Silverlight/Flex),

Currently, we are sharing our GIS web application over intranet but we wanted users to access this web site based on their username and password.

Previously, I was advised to lock the service from the �??arcgis server manager�?� but in that case only the Flex viewers will be requested to provide their username/password to access the web application while .Net and Silverlight will never have this option!!

[ATTACH=CONFIG]23523[/ATTACH], [ATTACH=CONFIG]23524[/ATTACH]


Then how the users of .Net and silverlight can still have the option to access the web application by their username/password?


Thank you

Best

Jamal

[AlexeyTereshenkov]

Jamal, consider updating to the 3.1 version which has functionality for challenging users with the username/password to access secured ArcGIS Server services you've added in the Builder. The pop-up window on the application load will let define what services will show on the map and what not (so if a web app consists of three map services while a certain user has access only to one of them, the application enters its username and password and then the web app will load yet the only one map service will be shown).

PS. Just in case you would want to implement secured access on the web application level, consider reading this Esri blog post with detailed instructions on how to do this in IIS. In this case, you secure the whole web application and not services itself (so called Web Tier authentication).

[Anonymous User]

Original User: Jamal432@gmail.com

Jamal, consider updating to the 3.1 version which has functionality for challenging users with the username/password to access secured ArcGIS Server services you've added in the Builder. The pop-up window on the application load will let define what services will show on the map and what not (so if a web app consists of three map services while a certain user has access only to one of them, the application enters its username and password and then the web app will load yet the only one map service will be shown).

PS. Just in case you would want to implement secured access on the web application level, consider reading this Esri blog post with detailed instructions on how to do this in IIS. In this case, you secure the whole web application and not services itself (so called Web Tier authentication).

Many thanks Alexey for the very informative answer,

I couldn�??t find an option in the IIS by which one can grant particular users to access particular sites.

[ATTACH=CONFIG]23574[/ATTACH]

For the time being, our GIS web application is shared on the intranet and users can access it via the ID of the server machine and the name of the published web application

What I wanted is to grant particular users permissions to access this web application and not to be open for everybody who are connected to our network

Is this possible,

By the way, I couldn�??t find the document relevant to IIS on the link you have already provided.

Best

Jamal

[AlexeyTereshenkov]

Jamal, this is absolutely possible to do in IIS. However, most of these settings are not exposed via the GUI. Please read up the documentation on IIS for finding out which way of authentication would work best for you. There are some guidelines on setting this type of security you are looking for (basically allow accessing a web application only to certain users of Active Directory), but I guess you might ask for help for your IT folks since it is not a trivial task.

The link for blog post works fine for me. If when clicking the ArcGIS blog opens, just click on the link again and it should work. If you Google "arcgis silverlight security" the first result would be the link to this page too.

[Anonymous User]

Original User: Jamal432@gmail.com

Jamal, this is absolutely possible to do in IIS. However, most of these settings are not exposed via the GUI. Please read up the documentation on IIS for finding out which way of authentication would work best for you. There are some guidelines on setting this type of security you are looking for (basically allow accessing a web application only to certain users of Active Directory), but I guess you might ask for help for your IT folks since it is not a trivial task.

The link for blog post works fine for me. If when clicking the ArcGIS blog opens, just click on the link again and it should work. If you Google "arcgis silverlight security" the first result would be the link to this page too.

Many thanks Alexey,

Sounds not easy to do! I thought it might be as easy as granting permissions to a user in a machine!

[ATTACH=CONFIG]23619[/ATTACH]

Or like granting permissions to a particular feature class! Right click and then add user!

[ATTACH=CONFIG]23620[/ATTACH], [ATTACH=CONFIG]23621[/ATTACH]

Why granting users permissions to a site is not as easy as that?

[ATTACH=CONFIG]23622[/ATTACH]

Best

Jamal