As of version 5.29 of VertiGIS Studio Web, the setting that allows for the authentication of apps using Integrated Windows Authentication (IWA) is no longer configured by default in new apps. This article outlines some details around the change and also describes how to re-enable the setting.
FAQs
Why was this done?
For IWA to work properly in a VertiGIS Studio Web app, Portal must be registered in the app as a trusted server. Prior to version 5.29, we automatically did this for all apps. However, this prevented layers with stored credentials from functioning properly, typically resulting in CORS errors. Essentially, IWA and stored credentials are not compatible with each other.
To provide out-of-the-box support for layers with stored credentials, we stopped adding Portal to the trusted servers list of new apps by default. This is great for layers with stored credentials, but means some additional setup is necessary to get IWA working in new apps.
What are some common symptoms of these changes?
If you use IWA for authentication, but have not made the necessary configuration changes to your apps, you may notice the following:
- You cannot change the web map in your app. The "Select Item" panel appears with choices of web maps from your Portal, but the "Select" button does not work.
- You can successfully deploy the app, but when you try to launch the deployed app, it fails to initialize with a "Failed to fetch" error. If you check the browser console, it contains CORS errors.
- You cannot save your app if it contains any server-side items like server workflows, report templates, or print templates.
What apps are affected?
Only new apps created after upgrading VertiGIS Studio Web to version 5.29 or later are affected by this change. Older apps that are carried forward will preserve their existing trusted servers list, meaning they will continue to be compatible with IWA without additional configuration.
If this was supposed to fix stored credentials, why aren't they working?
The fix is only applied to new apps created after upgrading VertiGIS Studio Web to version 5.29 or later. If you have carried your existing apps forward, you will need to manually remove the configuration that enables IWA in each app before you can add layers with stored credentials to them.
Information on how to do this is available in our "How to Get Layers with Stored Credentials to Work in VertiGIS Studio Web Apps" article.
Steps for Enabling IWA in New Web Apps
- Find your app in VertiGIS Studio Item Manager (only available in SaaS) or ArcGIS Assistant. If neither of these options are available to you, you can export the app from Web Designer by clicking File > Download App, unzip the app folder, and use a text editor like Notepad to open the app.json file.
- View the JSON contents of your app. If you are using Item Manager, this will be in the Item Contents tab. If you are using ArcGIS Assistant, this will be under the Data section.
- Click somewhere within the JSON and press CTRL+F. A search box should appear in the upper right corner of the panel.
- Search for "vertigis-web". You should see an object enclosed in curly brackets with the ID "viewer".
- Somewhere within the object (i.e. between the curly brackets), add the following, substituting "PortalHostName" for your Portal's host name:
"trustedServers": [ "PortalHostName" ],
- Ensure that the JSON is valid (i.e. no missing or extra commas) and save the changes. If you exported your app to make the edits, compress the files to a zip folder and import it into Web Designer by clicking File > Upload App. The app should now work with IWA.
Comments
0 comments
Article is closed for comments.