https://github.com/vertigis/arcgis-web-adaptor-extensions
VertiGIS Studio Web Adaptor Extensions enable server-to-server communication with ArcGIS Web Adaptors for IIS that have Windows authentication enabled and deny anonymous access.
https://github.com/vertigis/arcgis-web-adaptor-extensions
Last synced: 5 months ago
JSON representation
VertiGIS Studio Web Adaptor Extensions enable server-to-server communication with ArcGIS Web Adaptors for IIS that have Windows authentication enabled and deny anonymous access.
- Host: GitHub
- URL: https://github.com/vertigis/arcgis-web-adaptor-extensions
- Owner: vertigis
- License: mit
- Created: 2023-06-15T23:01:12.000Z (almost 2 years ago)
- Default Branch: main
- Last Pushed: 2023-08-17T22:06:23.000Z (over 1 year ago)
- Last Synced: 2024-08-03T22:17:03.946Z (8 months ago)
- Language: C#
- Homepage:
- Size: 20.5 KB
- Stars: 1
- Watchers: 6
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- jimsghstars - vertigis/arcgis-web-adaptor-extensions - VertiGIS Studio Web Adaptor Extensions enable server-to-server communication with ArcGIS Web Adaptors for IIS that have Windows authentication enabled and deny anonymous access. (C# #)
README
# ArcGIS Web Adaptor Extensions
Server-based applications like VertiGIS Studio Printing, Reporting, and Workflow need to make server-to-server requests to ArcGIS Enterprise.
If an ArcGIS Web Adaptor is configured with Windows Authentication enabled and Anonymous Authentication disabled these requests will be blocked because the Web Adaptor captures both the Windows identity of the Application Pool user and the ArcGIS access token of the end user. These two credentials will not agree and the backend ArcGIS Enterprise service will respond with an error.
The VertiGIS Web Adaptor Extensions provide a targeted solution. The extensions modify the ArcGIS Web Adaptor to discard the Windows identity, for select trusted service accounts, after it has been validated. This allows the Web Adaptor to still require Windows Authentication for all requests, while passing only ArcGIS access tokens on to the backend ArcGIS Enterprise service when the request is from a known server application.
## Requirements
ArcGIS Web Adaptor (IIS) version 11.1 and newer.
For ArcGIS Web Adaptor versions prior to 11.1 see https://support.vertigis.com/hc/en-us/articles/11461061234066-Install-the-Geocortex-Web-Adaptor-Extensions.
## Usage
### Installation
1. Download the latest release from https://github.com/vertigis/arcgis-web-adaptor-extensions/releases/latest
- Ensure the zip archive is not blocked by the operating system after you download it
1. Extract the zip archive into the Web Adaptor directory
- For example, `C:\inetpub\wwwroot\arcgis`
1. Open an administrative command prompt on the Web Adaptor machine
1. Navigate the command prompt to the Web Adaptor directory
- For example, `cd C:\inetpub\wwwroot\arcgis`
1. Execute the command `vs-wae add`
### Add a trusted server application
1. Open an administrative command prompt on the Web Adaptor machine
1. Navigate the command prompt to the Web Adaptor directory
- For example, `cd C:\inetpub\wwwroot\arcgis`
1. Execute the command `vs-wae trust [group/user]`
- Where `[group/user]` is the name of the Windows service account running the trusted applications, or the name of a Windows group containing the account(s).
- For example:
- `vs-wae trust "IIS AppPool\VertiGISStudioReporting"`
- `vs-wae trust DOMAIN\ServiceAccount`
- `vs-wae trust DOMAIN\MachineName$`
### Remove a trusted server application
1. Open an administrative command prompt on the Web Adaptor machine
1. Navigate the command prompt to the Web Adaptor directory
- For example, `cd C:\inetpub\wwwroot\arcgis`
1. Execute the command `vs-wae trust --remove [group/user]`
- Where `[group/user]` is the name of the Windows group or user to remove.