Set up security for the JavaScript Viewer

Available with Workflow Manager license.

Web security can be set up for the ArcGIS Workflow Manager (Classic) JavaScript Viewer using either Windows Authentication with IIS, Portal for ArcGIS Authentication, or ArcGIS Server token authentication.

Set up security using Windows authentication with IIS

Follow these steps to set up your web security by using Windows Authentication:

1. Enable Windows Authentication in IIS.

   Learn more about configuring Windows Authentication in IIS

2. Ensure Anonymous Authentication is disabled for your website.
3. In the JavaScript Viewer folder, rename the web.config file to web-secure.config.
4. Modify the deployed js/app/WorkflowManager/config/AppConfig.js file to use Windows Authentication.
   1. Set the Authentication mode to Windows (AuthenticationMode: "windows")
5. Rename the file extension of index.html to index.aspx. This enables the file to be edited as a .NET file.
6. Open the index.aspx file for editing.
7. Enable the application to use the Windows Authenticated user.
   1. For repositories without domain authentication, remove '//' (uncomment) from the line var user = "<%= User.Identity.Name.Replace(MyDomain)\","") %>";

      Replace 'MyDomain' to match your organization's domain.

   2. For domain authentication, remove '//' (uncomment) from the line var user = "<%= User.Identity.Name.Replace("\","*") %>";
8. Set up the application to use the Windows Authenticated user at startup.
   1. Remove '//' (uncomment) from the line Controller.startup( {user: user} );
   2. Put '//' (comment) in the line //Controller.startup();

      Note:

      Some web browsers automatically sign in users. If your browser does not, enter the user credentials and click OK.

Set up security using Portal for ArcGIS authentication

Workflow Manager (Classic) JavaScript Viewer can be configured to use the Portal for ArcGIS authentication. Support for portal authentication was added in ArcGIS Workflow Manager (Classic) 10.3.1. This configuration requires ArcGIS Server to be federated with an on-premises Portal for ArcGIS installation.

• Federate ArcGIS Server with Portal for ArcGIS using ArcGIS Web Adaptor.

  For information on how to federate ArcGIS Server, see Federate an ArcGIS Server site with your portal.

• Install ArcGIS Workflow Manager (Classic) on the federated ArcGIS Server site and publish your Workflow Manager (Classic) service.

For Portal for ArcGIS 10.5

In Portal for ArcGIS 10.5, the Workflow Manager (Classic) JavaScript Viewer can be deployed to a predefined location in the on-premises portal application directory. The application directory for the Workflow Manager (Classic) web application already has a preregistered applied, so no additional web application registration is needed.

1. Copy the contents of the Workflow Manager (Classic) JavaScript Viewer folder into the Portal for ArcGIS installation directory: \ArcGIS\Portal\apps\workflow.
2. Modify the deployed workflow/app/WorkflowManager/config/AppConfig.js file to use Portal for ArcGIS authentication.
   1. Set the authentication mode to Portal (AuthenticationMode: "portal")
   2. Update the Portal URL (PortalURL: "https://your-server/portal")
   3. Verify the Application ID is set to wmxweb.
3. To access the JavaScript Viewer:
   1. Sign in to portal and search for the ArcGIS Workflow Manager (Classic) application.
   2. Access via https://your-server.domain/portal/apps/workflow.

For Portal for ArcGIS versions earlier than 10.5

The Workflow Manager (Classic) JavaScript Viewer must be manually added and registered as an application in Portal for ArcGIS.

1. Copy the contents of the Workflow Manager (Classic) JavaScript Viewer folder into the web folder of the HTTP server, either at the root or a subfolder. For example, C:\Inetpub\wwwroot, C:\Inetpub\wwwroot\wmviewer, C:\Apache\htdocs, C:\Apache\htdocs\wmviewer.
2. Add the JavaScript Viewer as an item in Portal for ArcGIS.

   For more information on how to add an item to Portal for ArcGIS, see Add items.

3. Register the JavaScript Viewer with Portal for ArcGIS.

   For more information on how to register your application with Portal for ArcGIS, see the Register your app section of the Portal for ArcGIS topic Add items.

4. In the Portal for ArcGIS Application Settings, update App Registration and add the machine hosting the JavaScript Viewer to the existing Redirect URIs. The redirect URI can be redirected to after users successfully sign in: https://[hostname].domain.
5. Copy the Application ID of the registered JavaScript Viewer.
6. Modify the deployed js/app/WorkflowManager/config/AppConfig.js file to use Portal for ArcGIS authentication.
   1. Set the authentication mode to Portal (AuthenticationMode: "portal")
   2. Update the Portal URL (PortalURL: "https://your-server/portal")
   3. Update the Application ID of the registered JavaScript Viewer. This is the same Application ID copied from step 5. The ID is set to your-application-id.
7. To access the JavaScript Viewer:
   1. Sign in to your portal and click on the Workflow Manager (Classic) JavaScript Viewer registered in Portal for ArcGIS.
   2. Access directly by the application URL.

Use token authentication

When using ArcGIS Server token authentication with server built-in roles and users from the Windows domain, you need to provide the domain along with the user name at the time of sign-in to the Viewer. This is irrespective of whether domains are enabled for use in Workflow Manager (Classic).