Configure Proxy Page with Portal and IWA

3873
1
09-20-2019 08:34 AM
MikeLong
New Contributor III

We are attempting to configure a Proxy Page to allow some 3rd party developers the ability to access secure services in ArcGIS Enterprise.  Our Portal is open to the internet with our Web Adapter in the DMZ.  The Web Adapter is configured to authenticate with Active Directory (AD) using Integrated Windows Authentication.  We have a copy of our AD in the DMZ.  All map services are secure.

The proxy appears to be running correctly on IIS as the "ping" returns a valid response.

{ "Proxy Version": "1.1.2", "Configuration File": "OK", "Log File": "Not Exist/Readable"}

I believe that I have configure the proxy.config correctly to access the Map Service but I receive the following error when I attempt to test access with the following URL.

https://my.DNS.here/DotNet/proxy.ashx?https://my.DNS.here/server/rest/services/Service_Design/MapSer...

{  "error": {   "code": 499,   "message": "Token Required",   "details": []  } }


My proxy.config is below.

<ProxyConfig allowedReferers="*"
               mustMatch="true"
               >
<serverUrls>
            <serverUrl url="https://<my.DNS.here>/server/rest/services/Service_Design/MapServer"
            tokenServiceUri="https://<my.DNS.here>/arcgis/sharing/generateToken"
            domain="<my domain is here>"
            username="<my username is in here, it is able to access the Portal>"
            password="<my password is here>"
            matchAll="true"/>

</serverUrls>

Any ideas what I am missing here?

Tags (3)
0 Kudos
1 Reply
RobertO_Donnell
New Contributor II

Mike,  Did you figure this out.  We are moving from an unfederated server which works with the standard proxy page setup to a federated server and need the same access as you; from 3rd party software.  I looked at this in the past and couldn't get it working which is why we had just stayed unfederated.

0 Kudos