Security configuration ArcGIS

Configure Geoportal Server to use Portal for ArcGIS authentication

This page describes how to configure Geoportal Server to use ArcGIS Online or Portal for ArcGIS for authentication.

1. Add and register geoportal as an application with Portal for ArcGIS/ArcGIS Online

• For ArcGIS Online, follow the steps here
• For Portal for ArcGIS, follow the steps here

2. Uncomment the following line in app-security.xml to use file authentication-arcgis.xml for authentication

  <!-- <beans:import resource="authentication-arcgis.xml"/> -->

3. Update authentication-arcgis.xml with parameters for Portal for ArcGIS/ArcGIS Online

LDAP server settings

This section defines the server connection parameters

  <beans:bean id="arcgisAuthenticationProvider" class="com.esri.geoportal.base.security.ArcGISAuthenticationProvider">
    <beans:property name="appId" value="6iJ2pLIj9UwcSdfA"/>
    <beans:property name="authorizeUrl" value="https://www.arcgis.com/sharing/rest/oauth2/authorize"/>
    <beans:property name="createAccountUrl" value="https://www.arcgis.com/home/createaccount.html"/>
    <beans:property name="expirationMinutes" value="120" />
    <beans:property name="geoportalAdministratorsGroupId" value="" />
    <beans:property name="geoportalPublishersGroupId" value="" />
    <beans:property name="allUsersCanPublish" value="true" />
    <beans:property name="rolePrefix" value="ROLE_" />
    <beans:property name="showMyProfileLink" value="true" />
  </beans:bean>

Parameter Name	Description
appId	Value is the appID of the geoportal application registered with Portal for ArcGIS or ArcGIS Online
authorizeUrl	For ArcGIS Online, the value is https://www.arcgis.com/sharing/rest/oauth2/authorize, for Portal for ArcGIS, the value would be something like https://portalServerName/arcgis/sharing/rest/oauth2/authorize.
createAccountUrl	For ArcGIS Online, the value is https://www.arcgis.com/home/createaccount.html, for Portal for ArcGIS, the value would be something like https://portalServerName/arcgis/home/createaccount.html.
expirationMinutes	Duration for which the authentication will be valid, default is 120 minutes.
geoportalAdministratorsGroupId	Group name in ArcGIS Online or Portal for ArcGIS for Geoportal administrative users.
geoportalPublishersGroupId	Group name in ArcGIS Online or Portal for ArcGIS for Geoportal publishers.
allUsersCanPublish	Whether all users can publish, default is "true".
rolePrefix	Prefix of the role name, default is "ROLE_".
showMyProfileLink	Whether to show the My Profile link in Geoportal, default is "true".

Authentication manager settings

This section defines settings for the authentication manager

	<security:authentication-manager alias="authenticationManager">
	  <security:authentication-provider ref="arcgisAuthenticationProvider"/>
	</security:authentication-manager>

Parameter Name	Description
alias	Alias for the authentication manager
ref	It references /beans:beans/beans:bean/@id above. Default value: arcgisAuthenticationProvider