Latest Contributions by RandallWilliams

blocking stings like ${jndi will mitigate this issue.  ... View more

HI @NickHarvey , Looks like that doc needs some improvement, I can see the confusion.  You are correct - the OOTB MFA does not work with organization-specific logins like SAML, but the SAML providers OWN MFA absolutely will work. In fact, many of the ArcGIS Online ORGs we manage here internally at Esri leverage OKTA, in which our configuration requires MFA. Check out our Organization Specific logins FAQ in our ArcGIS Trust Center documents , we get deeeeep down in this technical paper. Let us know what you think!   ... View more

You can also configure a view on your hosted feature service. If you haven't seen it, check this out: https://downloads.esri.com/RESOURCES/ENTERPRISEGIS/Limiting_Access_to_Public_Survey123_Results.pdf This and other docs are available under the documents tab in the ArcGIS Trust Center. ... View more

I think that the issue is that you're sending a POST with query parameters in the URL string instead of inside the post body.  ... View more

That message is coming from Office365 - guessing you use AzureAD for your enterprise accounts? Sounds like a policy is in place limiting the apps/browsers that your org allows to access the IDP. ... View more

Yes, I provided it to OP via PM. Its in a raw format and not yet ready for public. It is current as to 10.8.1. It was compiled of this list: https://enterprise.arcgis.com/en/portal/latest/use/supported-items.htm plus the output of this command: https://devblogs.microsoft.com/scripting/hey-scripting-guy-how-can-i-use-windows-powershell-to-pick-out-the-unique-file-extensions-used-in-a-collection-of-files/   Then filtered for extensions that should not be allowed (eg: executables, config files, etc.)   ... View more

I dislike this kB. It will be ignored by those who require web server hardening. A better resource would include a list of custom extensions that can be allowed rather than a statement saying essentially "don't harden your web server". ... View more

@DanielGarcia  - MFA is supported natively in ArcGIS Enterprise starting in 10.9. ... View more

Sounds like unfortunate phrasing...full disclosure, I was in support 11 years, a technical lead for Enterprise Teams for 6. Service data is NEVER too large. Taken straight up, that's incorrect.  However, there may be optimization to be done. For instance, there may be scale dependences to be set or feature generalization that will help.  For instance, it's pretty frequent for users to attempt to draw every point and vertex at a small scale. Like, it doesn't make sense to show every vertex in a complicated geometry at a state level scale, nor would you want to attempt to visualize every house as a single point. Unless the map is cached, that'll cause real performance issues as all that geometry is sent from the server to the client. That's especially true with editable layers. I'd use scale dependent rendering and symbolize for heat maps and generalize those vertices. I also tend to separate my maps into thematic layers instead of one big uber service and mash them together client side. I find that more scalable for maintenance and helps rendering speed (one godzilla feature won't slow your whole app down). At larger scales you can get more granular. A broad statement like "you have too much data" is patently incorrect. I have highly performant customers with terabytes of data I speak to regularly.  ... View more

That's unusual. The web tier (IIS) isn't really dependent on the Enterprise GIS - the web adaptor is basically a proxy and only talks to ArcGIS Enterprise over HTTP(s). How was this issue addressed? Did you reinstall it or did you reregister the web adaptor with the GIS Server? It would helpful to understand better understand the issue prior to providing advice. A Windows update is more likely to impact IIS (specifically ASP.Net) than ArcGIS Enterprise.  ... View more

I'm pretty sure that the federated endpoints are automatically added to the allowed proxy hosts list. Requests to servers that are not allowed receive a http 403 response.   ... View more