Skip to main content

Securing a site with ArcGIS Server credentials

Permanently deleted user

Our ArcGIS Server is secured using users, roles, and permissions to service folders.  I have an Essentials site and map viewer that uses such secured layers.  My worry is that the username and password for those services is stored in the site configuration file.  I would prefer that the end user provide those credentials, instead of them being hard-coded.  ArcGIS.com does this, and I would like my Essentials Viewer to do the same.  Since my site has a public-facing URL, I don't want a casual user to catch wind of it and plug it into a browser at home; the user must have a username and password on our ArcGIS Server.  Any ideas on how I can get the viewer to request ArcGIS Server credentials from the user to show him/her the secured map service layers?

"Roj"

0

Comments

6 comments

Date Votes
  • John Nerge

    Is there any reason you couldn't just set up security on your Geocortex site to require a login? If you only want some users to access secured map services, you could deny them to other users.

    0
  • Permanently deleted user

    Yeah, I could do that.  But I was hoping that for Security Provider, I could specify ArcGIS Server at a particular URL that acquires a token for the services.  I suppose like many organizations, I want to maintain users in as few places as possible.  We already maintain their domain user names, ArcGIS Server user names, and they maintain ArcGIS.com user names also.  Adding an Essentials user names just adds another level of complication when users change roles, jobs, quit, or are newly hired.

    0
  • Jeff Siemens

    Hi John,

    You won't be able to get Essentials to prompt the end user for credentials when using token secured ArcGIS Server services. With the upcoming 4.0 release, you will be able to get the end user to provide credentials for the service so long as the ArcGIS Server instance is using HTTP based authentication (Basic, Digest, Windows authentication).

    With regards to limiting the number of users you need to maintain, I think probably the best solution would be for you to configure Essentials to use Windows authentication when you site up the site security. This way you won't need to manage a new set of users. You just use your Windows / Active Directory users. 

    Jeff

    0
  • Permanently deleted user

    I thought that the Windows/Domain authentication only worked when the computer accessing the site was Windows-based, not iOS-based, which is why I didn't try it.

    0
  • Permanently deleted user
    Hello,

     

    I realize this is an old thread but I was wondering if you ever found a solution to securing sites with ArcGIS Server credentials?
    0
  • Permanently deleted user
    I have secured map services on ArcGIS Server, and want users to provide their ArcGIS Server Credentials from HTML5 viewer. I don't want to configure a mapservice with one existing account. I am using Essentials manager 4.10. Is this functionality possible now ?

     

    Muhammad Almas
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post