How is the ArcGIS API for JavaScript secure?
ArcGIS provides many ways to secure access to your organization’s content and services. The ArcGIS API for JavaScript provides full support for access to secured ArcGIS Enterprise and Online resources using various methods. OAuth 2.0 — secures delegated access to server resources.
How is ArcGIS used to access secured resources?
The ArcGIS Platform determines user authenticity and a token is supplied to the client application. This token is then used in subsequent requests for secured resources. This is available in both ArcGIS Online and ArcGIS Enterprise version 10.3 and later and can be used with both user and application logins.
When to use user login in ArcGIS Server?
One scenario where you might use the user login approach is when building an application that access an ArcGIS Server service secured with token-based authentication. If an application tries to access a secure service, a valid token is required to unlock the service.
What kind of authentication is available for ArcGIS?
OAuth 2.0 based authentication is available for applications registered with ArcGIS Online or Portal for ArcGIS. If you are an application developer with an organizational account, you can register your application.
Can you use Esri JavaScript in ArcGIS for server?
When using ArcGIS for Server in an isolated or secure environment, it may not be possible to access the hosted Esri JavaScript API libraries. This article provides a walkthrough for installing a local copy of the JavaScript API and configuring it for use with ArcGIS for Server.
How are secure resources handled in ArcGIS Server?
For example, a web application that accesses a secure service can be configured to prompt a user for their username and password credentials. The end user needs to have permissions set with the platform so that their credentials can unlock the service. Managing users and their roles can be handled various ways in ArcGIS Server.
What do you need to know about the ArcGIS API?
API Keys — a unique identifier used to authenticate a user, developer, or calling program to ArcGIS Online. ArcGIS Tokens — Esri’s proprietary token-based authentication mechanism. Network credentials — HTTP secured service / Integrated Windows Authentication (IWA).
Can you use ArcGIS for Integrated Windows Authentication?
To use Integrated Windows Authentication, you must use ArcGIS Web Adaptor (IIS) deployed to Microsoft’s IIS web server. You cannot use ArcGIS Web Adaptor (Java Platform) to perform Integrated Windows Authentication. If you haven’t done so already, install and configure ArcGIS Web Adaptor (IIS) with your portal.