How can I share a web viewer outside my organization
I have created a webviewer on apps.geocortex.com which I would like to share with someone outside my organization.
In order to do that, I created a group in ArcGIS Online, and added the external user to it. When this person tries to open the viewer, the following error message is shown:
Error: The user you attempted to login with is not associated with the origination that created the application, login is disabled.
Even though I learned today what the word origination means, I can't figure out how to solve this. Is it possible at all?
-
Hi Berend - been looking into this. Currently there are checks in place (driven by legitimate security requirements) that would prevent an authentication-required app from being accessed by credentials that are not part of your org. *and UGH for the spelling mistakes in that error message*
0 -
Oh, that's a pity, but thanks anyway for letting me know.
0 -
Hi Cam Barnard,
Are there any updates concerning this topic?
We have customers that share data, webmaps and ArcGIS Online web applications through ArcGIS Online collaboration groups. They want to do the same with VSW applications but are running into the error-message mentioned above.
Our municipal customers use collaborations to easily share information and cooperate on projects - and it would be beneficial for them to access each other’s VSW applications.
Best,
Jonas
2 -
I'd also like to understand if there's any plans to address this.
From an Esri licensing perspective, we need to use AEC PDS organisations to collaborate with our primary ArcGIS Enterprise/Online Portals. VSW not being accessible via collaborations means we need to find another solution to VSW or break Esri third party licensing rules.
It's not unreasonable to expect that accounts participating in a partnered collaboration (AGOL) can access a VSW app, wherever they come from.
Is this access issue only applicable to SaaS VertiGIS Studio?
Cheers,
Leon.
1 -
I'm getting this error with Hub Premium too, even though I've configured the web designer with the new AGO organization. If we can't get this to work, as the Geocortex Identity Server is going away, we'll need to look into a non-VertiGIS solution.
0 -
In case this saves anyone else, make sure your AGO group is set to “Who can be in this group?” = “Partnered collaboration and my organization's members only”. When you create a team in a Hub Premium initiative, it defaults to “Any organization's members” and gives the error of “The user you attempted to login with is not associated with the organization that created the application, login is disabled.” if they try to view your apps. Simply swapping that “Who” and the site loads, hallelujah.
0 -
Chelsea Rozek Are you indicating that you can indeed share an VSW app with another organization through a patterned collaboration group? Is your app just a viewing app, or are there editing capabilities?
0 -
Hey Jack Charde yes, VertiGIS Studio Web supports partnered collaboration.
I did not immediately find documentation on it, though there is description in the Release notes:
Added Web support for Esri partnered collaboration in ArcGIS Online.https://doc.arcgis.com/en/arcgis-online/administer/create-partnered-collaboration.htm
https://doc.arcgis.com/en/arcgis-online/share-maps/create-groups.htm
- We have adjusted our org check logic to accommodate Web apps inside a group backed by a partnered collaboration.
Previously, if an app was created by Org A, when an authenticated user from Org B tried to run the app within a group backed by an Esri partnered collaboration, a security check inside Web would fail and the app would not open.
Esri partnered collaboration meets the security requirements ensuring that both parties have ‘opted in’ to trust each other. The security check inside Web has been extended to see if the app is inside a partnered-collaboration-backed group, and if so, to allow an authenticated user accessing it from Org B to run that app.
This only works when both orgs are within ArcGIS Online. There is no support for this pattern within ArcGIS Enterprise. Partnered Collaboration is an ArcGIS Online feature and is different from the Distributed Collaboration groups used by ArcGIS Enterprise to sync content between orgs.
This only works with https://apps.vertigisstudio.com / https://apps.vertigisstudio.eu. It will not work with a VertiGIS Studio SaaS subdomain (e.g., it will not work if either org is using https://<org>.apps.vertigisstudio.com or https://<org>.apps.vertigistudio.eu).
This new pattern works if Org A is properly licensed. The license status of Org B is not verified, which allows this collaboration pattern to work both for use cases where Org A has an appropriate Web license tier to cover the identities of Org B, or where Org B has their own Web license to cover their identities.
To answer your question about editing: feature editing typically requires a named user, though it is possible to configure feature layers to allow editing by public/anonymous users. This is all at the ArcGIS feature layer configuration level, see Allow public data collection.
Hopefully this helps! Please let me know if you need more detail or are stuck.0 -
Jack Charde My situation is specifically for our regular AGO organization and our Hub Premium organization (a separate AGO organization). I'm not sure if other partnered collaborations have any different nuances. Our VSW apps are view only, but we do allow Hub members to edit hosted features in our normal AGO organization outside of VertiGIS Studio, so I imagine it would work for editing too.
0 -
Chelsea, thanks for the follow-up!
@..., thank you as well for those notes! I forgot that partnered collab is an AGOL thing only. The org I'm working with uses ArcGIS Enterprise. My client has a GXE site that allows outside orgs to sign in and edit feature attributes using credentials provided to them, which are stored in Geocortex Identity Server. We migrated them to on-prem VertiGIS Studio, which only uses Portal-based authentication. So, if there's no support for distributed collaboration (and to begin with, I don't even know if all the other orgs have AGOL), is the only recourse to give each org a user type in my clients Portal for ArcGIS so they can access the new VSW app?
0 -
Is a solution to solve the error “The user you attempted to login with is not associated with the organization that created the application, login is disabled.” to create a partnered collaboration?
0 -
Nico Burgerhart yes, that's the answer. Once that collaboration has been established, ensure the “external” user has access to the content via a group in the licensed organisation.
0 -
Are there any plans for VSW to support sharing via Distributed Collaboration groups in ArcGIS Enterprise? Specifically, can we expect to be able to share a VSW app from ArcGIS Online (AGOL) with Enterprise viewer users?
1
Bitte melden Sie sich an, um einen Kommentar zu hinterlassen.
Kommentare
13 Kommentare