Configuring security in the Event Editor

Configuring security through Integrated Windows Authentication

You can secure access to the Event Editor using Integrated Windows Authentication (IWA). When you use IWA, logins are managed through Microsoft Active Directory. Users do not sign in and out of Event Editor; instead, when they start the application in a browser, they are signed in using the same accounts they used to log in to Windows.

To use Event Editor with Integrated Windows Authentication, the ArcGIS Portal Web Adapter, the ArcGIS Server Web Adaptor, and Event Editor need to be deployed on the same web server machine.

To setup Portal for ArcGIS with IWA, see Use Integrated Windows Authentication with your portal.

To set up a federated server with Portal for ArcGIS using IWA, see Federate an ArcGIS Server site with your portal.

1. Open your Event Editor config.json file. Browse to Security. Make sure type is set to none.
2. Remove the port number from all REST URLs used in your Event Editor configuration.

   All REST URLs used in your Event Editor configuration must use the same server hosting the ArcGIS Web Adaptor (IIS).

Configuring security through OAuth 2.0 using Portal for ArcGIS or ArcGIS Online

You can secure access to Event Editor using a OAuth 2.0 based authentication mechanism. To enable OAuth 2.0 based authentication, you must first register the Event Editor web application with either Portal for ArcGIS or ArcGIS Online. If you would like to use a secured map service, you must register the Event Editor web application with Portal for ArcGIS to federate your ArcGIS Server site with Portal to support single sign-in.

1. Sign in to your Portal for ArcGIS or ArcGIS Online account to add and register the Event Editor web application.
2. Open your Event Editor configuration file.
3. Browse to security and set type to portal.

   Примечание:

   By default, agsTokenExpirationMinutes is set to one week. The refresh token is not renewed once it expires, and you will be prompted to sign in to your portal upon refresh token expiration.

4. Specify the portalAppId.

   For more information, see Configuring Portal for ArcGIS or ArcGIS Online for Event Editor.

Start the Event Editor web application in a web browser. Use your portal credentials to sign in. Once the supplied credentials are verified by Portal for ArcGIS or ArcGIS Online, you will be directed to a secure Event Editor environment.