Latest Contributions by LanceCole

‎05-19-2023

We recently upgraded our enterprise deployment to 11.1 and as part of that process, we federated our ArcGIS server site with the portal. This allows us to utilize integrated Windows authentication (IWA) on our enterprise systems. Everything is working great with single sign-on (SSO) working seamlessly on our network when our portal is configured for web-tier authentication. However, we can no longer access secure services from ArcGIS Online (AGOL). AGOL does not give the option to save the credentials when adding a new URL-based item from our secure portal. If we switch our Portal to portal-tier authentication the option to store credentials with a service item appears and we can access the secure data from AGOL without a logon; however, we lose our SSO functionality, and network users have to manually sign into secured services. Am I missing something? Is there a workaround to be able to use web-tier authentication while still storing credentials on AGOL items? We are using AGOL to make available some of our secure services publically available from our enterprise systems. It has worked great in stand-alone deployments and on Portal when configured with portal-tier authentication. I just cannot get it to work when using web-tier authentication.

‎05-07-2023

Thanks, @John_Tyll and @Scott_Tansley for your input and feedback. I ended up using the following configuration after coordinating with our IT department and ESRI Support. 1) The external.domain.com is passed through the external firewall on port 443 to the IIS server in the DMZ via NAT and a Web Application Firewall. The IIS server hosts the Portal and server web adapters using a CA-issued certificate for the external domain. However, the IIS server is a member of the internal domain but on a different subnet. 2) The Web Adapters were set to the external 443 port on the IIS server and configured using the external URLs https://external.domain.com/portaladaptername/webadapter and https://external.domain.com/serveradaptername/webadapter. These are pointed to the internal Portal and Server names - https://portalserver.domain.local:7443 and https://arcgisserver.domain.local:6443. 3) We set up a Split-DNS on our internal domain for external.domain.com. This directly directs the internal request to the IIS web adapters in the DMZ. The external DNS directs the external IP to our network edge where the external firewall uses NAT to the internal DMZ IP. 4) We use SSL certificates from our internal domain CA on all internal ArcGIS and Portal Servers. These were requested and installed on each server in place of the self-signed certificates. We also added our domain CA root and intermediate certificates to these servers. We could have added each server's certificate to each ArcGIS server, but this quickly gets complicated with multiple servers. The IIS server is using a commercial CA for the external domain name. 5) At this point, everything was working, and we integrated Portal using IWA. This allowed us to set up a domain administrator account on Portal before federating. All the existing services were referenced into Portal under the domain account used to federate. 6) We chose to go ahead and federate the Portal with our ArcGIS server site. We logged onto Portal using https://external.domain.com/portaladaptername/home. For the Services URL we used https://external.domain.com/serveradaptername. We have multiple ArcGIS GIS servers running on our ArcGIS Server site; therefore, the same URL was used for the Administration URL rather than one of the 6443 URLs. I missed this requirement the first time - thank goodness for hourly server snapshots. This does require Administration to be enabled on the server web adaptor. https://enterprise.arcgis.com/en/portal/latest/administer/windows/federate-an-arcgis-server-site-with-your-portal.htm

‎05-02-2023

Hello All, We got Enterprise 11.1 deployed on our test platform and all our migration details worked out. However, IT announced this morning that the update of our internal domain name will not be implemented at this time. We had planned on using the same internal and external domain to facilitate the deployment of our new 11.1 Enterprise system. The web adapters were to be placed in a DMZ and the Portal and GIS Servers placed on the internal network behind the firewall. I understand the ArcGIS Enterprise portal supports only one DNS for public portal URL. Can this be set to the internal domain with internal server and portal web adapters then add a second pair of Web Adapters in the DMZ as noted below? We do not have a reverse proxy available. Modified from Deployment Patterns for Exposing ArcGIS Enterprise Secured Services to External Users How would the two additional Web Adapters be configured? I assume external.domain.com to the internal.domain.net, all on 443.

‎04-30-2023

I ended up Integrating after Federating the Portal. The only downside is all the existing content on the ArcGIS Servers was assigned to the portal account used when Federating. It was not too hard to use the "Transfer Content" option on the member's list to assign the content to the appropriate domain user.

‎04-28-2023

We are setting up a new multi server, 11.1 Enterprise deployment. I have my notes from our last 10.x deployment but I did not document if integration with IWA should be completed on Portal before or after federation. Does it matter?

‎04-20-2023

Looks like @StefanUseldinger had the correct date on this one. Enterprise 11.1 documentation started showing up this morning and the software is available for download on my.esri download links. I guess I know what I will be building next weekend.

‎04-14-2023

@DavidPike, Thanks. Yes, it looks like the MAPX is the best option. Just slow to load when there are a lot of feature classes.

‎04-14-2023

Thanks, @Robert_LeClair. That is what we attempted; however, when you open the APRX file on another system or open a shortcut to the APRX file ArcGIS Pro creates the APRX, GDB and ATBX files in the folder (or desktop) where the APRX was opened. For example, I clicked on the Wards.aprx - shortcut saved on my desktop and ArcGIS Pro created the additional files.

‎04-14-2023

At the end of this month, we are fully migrating to ArcGIS Pro 3.1 from Desktop 10.x. For ArcGIS Desktop 10.x, we had created about 30 MXDs that are saved on a read-only network share. Users can quickly select a needed MXD to load onto their system in ArcGIS and render the needed information. The MXDs can be accessed directly from the share or from a handful of shortcuts that are saved to the user's desktop. They can also save the MXD locally and make personal modifications as they deem necessary for their own use. Furthermore, our GIS team can make changes to the MXDs on the read-only share as changes are needed and users receive these updates the next time they open the MXD or the link to the MXD. We have not been able to find a similar means to disseminate this information in ArcGIS Pro. We did a test using APRX files but this resulted in other files being created on the user's system including GDBs, ATBX, etc. for each APRX opened. We also tried using MAPX files but with some of our larger maps, it can take some time to import all the feature classes and dataset layers when opening the MAPX file. The same using LYRX files but even slower. Any suggestions and does anyone know the recommended method to complete something similar in ArcGIS Pro?

‎03-23-2023

@AdrianWelsh , With AppBuilder and Javascript API 3.x being retired in July 2024, I would use Experience Builder. You could save your chats to a database table and connect them together using a 1:M relationship class through a static Global ID on the point feature to a GUID on each chat thread. In Experience builder, you can connect widgets together using actions as outlined in the ESRI document Add and connect widgets.

‎03-12-2023

Found the group. Not sure why this does not show in search. Still looking for a list of custom Experience Builder widgets. https://community.esri.com/t5/experience-builder-custom-widgets/gh-p/eb-custom-widgets

‎03-12-2023

With ESRI announcing AppBuilder is being phased out next year I started looking into migrating to Experience Builder. Is there a similar user group for Custom Experience Builder Widgets and a list of those available on the ESRI Community?

‎03-02-2023

We ended up rebuilding the project and this seems to have resolved the issue. The project was originally created in an older version of ArcGIS Pro 2.x and we are now running 3.1.

‎02-14-2023

While editing the index layer data that drives the dynamic data pages the map will just disappear from the screen. It took a little time to troubleshoot the issue the first time but we found the project Map coordinate system had changed from NAD83/86 to some coordinate system I had never heard of before. Reset the map coordinate system back to NAD83/86 and everything works as long as you do not edit the data. If you disable map series before trying to edit the data, the issue does not occur. All feature classes and the basemap imagery are in the same coordinate system in this project.

‎02-14-2023

@AdrianWelsh , We are running ArcGIS Pro 3.0.3. We currently do not have a spatial reference field included in our dataset for this map series. I assume this would be a WKID value? All of the data and maps are in the same coordinate system and everything works fine as long as you do not edit the Index Layer data while the map series is enabled. When you do, the map coordinate system will randomly change to an unrelated coordinate system. As I noted in @Hala_Ghareeb post we are under a deadline to get this data published today but I will try your solutions in more depth tomorrow. Thanks again for your input.

Online Status	Offline
Date Last Visited	2 weeks ago

My Ideas

Latest Contributions by LanceCole

Allow AGOL access to a secured Enterprise Portal service using web-tier authentication

Re: Enterprise deployment with different external/internal domains

Enterprise deployment with different external/internal domains

Re: Integrate portal with IWA before or after Federating?

Integrate portal with IWA before or after Federating?

Re: ArcGIS Enterprise 11.1 vesion

Re: Distributing APRX files in ArcGIS Pro or equal to MXDs in Desktop

Re: Distributing APRX files in ArcGIS Pro or equal to MXDs in Desktop

Distributing APRX files in ArcGIS Pro or equal to MXDs in Desktop

Re: Is there a widget to show a log of communication associated with a specified point?

Re: Is there a similar user group for Experiance Builder Widgets?

Is there a similar user group for Experiance Builder Widgets?

Re: Coordinate system randomly changes.

Re: Coordinate system randomly changes.

Re: Coordinate system randomly changes.

Re: Arcgis Pro 2.4.1: Calculate Field Error

Re: ArcGIS Pro Python - A row with this OID alread...

Re: Pop-ups not enabled in web map but showing up ...

Re: Pop-ups not enabled in web map but showing up ...

Re: Coordinate system randomly changes.

Experience Builder Custom Widgets