Web Tier authentication problems

06-02-2017 04:24 AM
New Contributor III


We have arcGisServer 10.5 installed, ArcGisPortal 10.5.

We have federated ArcGisServer to Portal.

Web tier authentication has been enabled.

We have written a widget using the web app builder dev edition 2.3, exported the app out and placed it on a web server.

(When web-appbuilder dev edition connects to our portal the signinInfo.json that gets created tells me our portal uses web tier authentication !)

The exported application has been added as an Item on Portal.

The application consumes feature services we have published and appear as items in Portal, these have been secured with groups, with the correct users added to the Identity store pulled through from Active Directory. The web map, the application and the feature services have all been shared to the group I have created.

When the application loads I can see object errors in the console log of internet explorer 11 and chrome

Inspecting the network traffic I can also see tokens being appending to all requests made to the rest endpoint for the feature services. My understanding of web tier authentication, after reading Esri Documentation for this topic (!!) is that tokens should not be used. I only say this as if I physically go to the rest endpoint for the feature service and then go back to the application, I seen no Token errors in the console and the requests made to the rest endpoints contain no tokens.

Does anyone know if we have a configuration error with our Portal and AGS federation ?

An application we have built with the Portal web app builder, that consumes a group secured map service also displays this behaviour.

Anyone else experienced this issue ?

I have also posted this question on the developer forum.

0 Kudos
1 Reply
MVP Esteemed Contributor

Johnathan, there is no need to publish the thread in two places, and tends to cause confusion if there are multiple threads.  I recommend you use the other and add a tag to this and any other space you need like

https://community.esri.com/community/gis/web-gis/portal-for-arcgis?sr=search&searchId=bf11fec8-6204-...‌  https://community.esri.com/community/gis/enterprise-gis/arcgis-for-server?sr=search&searchId=47fb69c...‌  https://community.esri.com/groups/web-app-builder-custom-widgets?sr=search&searchId=ab1c51d5-0c03-46...‌   and/or any other relevant space.

If you do that in your other post, you can delete this one.