POST
|
Hi all, I'm having a hard time figuring out how to achieve a Single Sign On experience from a JS application. Let me explain in detail my situation: Portal for ArcGIS 10.4.1 federated with an ArcGIS Server 10.4.1 Identity has been federated: I set up a SAML2 compliant identity provider, namely IdentityServer4 Following https://enterprise.arcgis.com/en/portal/10.4/administer/windows/configuring-a-saml-compliant-identity-provider-with-your-portal.htm (Service provider initiated logins) I configured it as the identity provider I can now browse to the Portal, be redirected to the IdentityServer4 login page and login using the configured enterprise logins In Portal I have created a group and added some users to that group I created a Tile Layer item based on an ArcGis Server Map Service and I shared it with the above-mentioned group I created a new Javascript application that: Authenticates against the IdentityServer and obtains an access token from that References the ArcGIS Javascript API 4.11 to show a map Adds the Tile Layer item to the map What I got until now is the ESRI authentication dialog appearing as soon as I load the tile layer. What I want is to access the Tile Layer using the token that I obtained from the IdentityServer, without the user having to sign in again. Here is the JS code I use to display the map and the Tile Layer: var map = new Map({ layers: [new TileLayer({url: basemapUrl})]}); var view = new MapView({ container: "viewDiv", map: map }); esriConfig.portalUrl = 'http://atlhqmvmsdev4.eusc.europa.eu/arcgis'; var portal = new Portal({ isPortal: true }); portal.authMode = "auto"; portal.load().then(function () { Layer.fromPortalItem({ portalItem: { id: "1b4c51aa3feb42bba71ae02195e03f75" // ID of the Tile Layer item } }) .then(function (layer) { map.add(layer); }) }); mgr.getUser().then(function (user) { esriId.registerToken({ token: user.access_token, server: portalUrl }); }); What am I missing? Any hint or clarification is very welcome!
... View more
05-14-2019
09:20 AM
|
4
|
1
|
1911
|
POST
|
Hi, I'd like to give the users of my application the ability to easily compare two different instants of the same time-enabled layer, for example with the LayerSwipe widget. The problem is that this widget only takes an array of layers as input, and the timestamp AFAIK can't be set at layer level, but only at map level, so I don't see a way to compare two different instants of the same layer... Any idea/suggestion/workaround for this? Thanks!
... View more
04-27-2015
05:50 AM
|
0
|
1
|
2580
|
POST
|
In my organization we are investigating the possibility of publishing some content to AGOL, but the authentication should be done against our internal Identity Server. At the moment this Identity Server does not exist, but we are planning to use the Thinktecture Identity Server. Here I have seen a list of supported identity providers: http://doc.arcgis.com/en/arcgis-online/administer/enterprise-logins.htm#ESRI_SECTION1_E666FC046A1746C6B25F5EBF3058B992 Thinktecture is not appearing, so my question is: is it going to be supported anytime soon? Is there any "hack" that I could do to make it work in the meanwhile? Or we should definitely use one of the listed identity providers?
... View more
08-13-2014
08:19 AM
|
0
|
0
|
2751
|
Title | Kudos | Posted |
---|---|---|
4 | 05-14-2019 09:20 AM |
Online Status |
Offline
|
Date Last Visited |
11-11-2020
02:24 AM
|