Problem setup Portal for ArcGIS with Integrated Windows Authentication

10924
16
10-27-2013 06:28 AM
AnthonyChong
New Contributor
Hi,

i have been trying to setup Integrated Windows Authentication for my Portal for ArcGIS without success. Here's my configuration:

- Windows 2008 Server R2, IIS 7
- Portal for ArcGIS 10.2, unfederated, Web Adapter (IIS), default built-in users authentication

I followed the steps in the online resource:

http://resources.arcgis.com/en/help/main/10.2/index.html#/Using_Integrated_Windows_Authentication_wi...

When i login using the initial admin account via https://portal.domain.com:7443/arcgis/home, i didn't see any AD users being populated in the user list - instead i still see the same default built-in users.

Are there any logs i can check if my connection to AD is established?
Are there any settings to look out for that are not mentioned in the resources?

Thanks!
Tags (2)
0 Kudos
16 Replies
TonyGegner
New Contributor III
AD users will be listed after the first time they visit the site with SSO.

It doesnt populate every user in the AD automaticly.
0 Kudos
AnthonyChong
New Contributor
hi,

Just to clarify on the step for Designating a Windows account as an administrator (step 3 in particular):

Steps:
1.Open a browser and connect to your portal through port 7443, for example, https://portal.domain.com:7443/arcgis/home.
2.Sign in using the initial administrator account you created when you set up Portal for ArcGIS.
3.Find the Windows account you will use to administer your portal and change the role to Administrator. The account will appear in the format username@domain.
4.Sign out of the website.

Do you mean that i have try to login as a AD account first before i can see my AD account using my initial admin account?

Thanks!

-Anthony
0 Kudos
TonyGegner
New Contributor III
Hi,
First you create your initial portal admin account.

Then connect to the site (https://portal.domain.com/arcgis/home) through the webadaptor with SSO.
You should be logged in automaticly with your current domain user if everything is set up correctly.

Then connect to https://portal.domain.com:7443/arcgis/home and logon as the initial portal admin account.
Now you should se your AD-user in the list and you can change account type to admin.
0 Kudos
AnthonyChong
New Contributor
Thanks for the reply.

When i access https://portal.domain.com/arcgis/home, I was prompted to login to my domain. I keyed in my domain id and password and click ok. It still shows me the unauthenticated home page (with the "Sign In" link on the top right). Can I say that my web adaptor (IIS) setup is not correct? I followed the steps on the resources, what else did i miss out? My Web Adaptor is not shared.

Configuring the ArcGIS Web Adaptor to use Windows authentication:
1.Start IIS Manager.
2.Access the ArcGIS Web Adaptor website in the Connections panel.

Expand <your server> > Sites > Default Web Site and click on your Web Adaptor. If you used the default name, the site is named arcgis.

3.Double-click Authentication in the Home panel.
4.Click Anonymous Authentication and click Disable.
5.Click Windows Authentication and click Enable.
6.Close IIS Manager.

Thanks!

-anthony
0 Kudos
TonyGegner
New Contributor III
Hi,
Yes thats correct.

Have you also added the AD-configuration to the configuration file?: C:\Program Files\ArcGIS\Portal\etc\portal-config.properties
idp.type=WINDOWS
idp.ad.user=domain\\domain_user
idp.ad.userpassword=domainuser_password
idp.ad.user.fullnameattribute=cn
idp.ad.user.emailattribute=mail
idp.userpassword.encrypted=false

You can also check the log and see if you find something interesting
C:\arcgisportal\logs\webserver\catalina.<date>.log:
C:\arcgisportal\logs\webserver\localhost.<date>.log
0 Kudos
AnthonyChong
New Contributor
Yes. i have configured that and restarted the portal service. I went thru the link several times and quite sure i didn't miss out anything.

http://resources.arcgis.com/en/help/...0000066000000/

I also check the 2 logs you mentioned, nothing seem to indicate any authentication errors.

Not sure what else i have missed out.

Any pointers would be greatly appreciated.

Thanks.

-anthony
0 Kudos
TonyGegner
New Contributor III
You restarted the portal service after changing authentication mode?
0 Kudos
AnthonyChong
New Contributor
Yes. I did.
0 Kudos
AtsuhitoNAKANO
Esri Contributor
I have also the same problem...

If it is true that we can integrate Portal with AD, please show us your success sample.
0 Kudos