How to configure portal authentication for ArcGIS Enterprise?

How to configure portal authentication for ArcGIS Enterprise?

The primary factor you should use to determine how you configure security in your ArcGIS Enterprise deployment is the source of users and, optionally, groups for your portal. This source of users and groups is called your identity store. Users and groups within or outside your organization are managed through the identity store.

Where is the portal for ArcGIS installation directory?

The Portal for ArcGIS installation directory is for the portal’s software components. Click Next. Specify the portal’s content directory. The content directory stores content installed with the portal as well as user-generated content. After installation, you can change the account that is used to run Portal for ArcGIS.

Do you need Active Directory for ArcGIS Enterprise?

Using an Active Directory identity store, ArcGIS Enterprise supports authentication from multiple domains with a single forest, but does not provide cross-forest authentication. To support enterprise users from multiple forests, a SAML identity provider is required.

Do you need web tier authentication for ArcGIS Server?

Although it may sound counterintuitive, this is necessary so that your site is free to federate with the portal and read the portal’s users and roles. If your ArcGIS Server site is not already using web-tier authentication, no action is required.

What does the identitymanager object in ArcGIS do?

This object provides the framework and helper methods used in managing user credentials for the following resources: Secured ArcGIS.com or ArcGIS Enterprise portal resources (e.g. web maps). ArcGIS Server resources secured using token-based authentication. Note that only ArcGIS Server versions 10 SP 1 and greater are supported.

How is the user name displayed in ArcGIS portal?

Regardless of how the member signs in, the user name always displays as username@domain in the portal website. If using the portal with LDAP, the syntax is always username. The portal website also displays the account in this format. The ArcGIS Enterprise portal supports all SAML-compliant identity providers.

How to register a secure server in ArcGIS?

Register secure servers and the token endpoints. Registers the given OAuth 2.0 access token or ArcGIS Server token with the IdentityManager. Once a user successfully logs in, they are redirected back to the application. Use this method in the popup callback page to pass the token and other values back to the IdentityManager.