Integrated windows authentication

View on GitHub

Sample viewer app

Uses Windows credentials to access services hosted on a portal secured with Integrated Windows Authentication (IWA).

screenshot

Use case

IWA, which is built into Microsoft Internet Information Server (IIS), works well for intranet applications, but isn't always practical for internet apps.

How to use the sample

Enter the URL to your IWA-secured portal in the text field at the top of the screen and click "Search Secure". You will be prompted for a username (including domain, such as username@DOMAIN or domain\username), and password. On Windows it will automatically use your current login credentials. If you authenticate successfully, portal item results will display in the combo box below. Select a web map item and click the "Load Web Map" button to display it in the map view.

How it works

The AuthenticationManager object is configured with a challenge handler that will prompt for a Windows login (username, password, and domain) if a secure resource is encountered.
When a search for portal items is performed against an IWA-secured portal, the challenge handler creates an Credential object from the information entered by the user.
If the user authenticates, the search returns a list of web maps (PortalItem) and the user can select one to display as a Map.
On some platforms, the current Windows account is used by default and a login prompt will not be shown if it can authenticate successfully.

Relevant API

AuthenticationManager
Credential
Portal

About the data

This sample searches for web map portal items on a secure portal. To successfully run the sample, you need:

Access to a portal secured with Integrated Windows Authentication that contains one or more web map items.
A login that grants you access to the portal.

Additional information

More information about IWA and its use with ArcGIS can be found at the following links:

Sample Code

IntegratedWindowsAuthentication.cpp

IntegratedWindowsAuthentication.h

IntegratedWindowsAuthentication.qml

Use dark colors for code blocksCopy
// [WriteFile Name=IntegratedWindowsAuthentication, Category=CloudAndPortal]
// [Legal]
// Copyright 2019 Esri.

// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
// http://www.apache.org/licenses/LICENSE-2.0

// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
// [Legal]

#ifdef PCH_BUILD
#include "pch.hpp"
#endif // PCH_BUILD

#include "IntegratedWindowsAuthentication.h"

#include "Map.h"
#include "MapQuickView.h"
#include "Portal.h"
#include "PortalItem.h"
#include "PortalQueryResultSetForItems.h"
#include "PortalItemListModel.h"
#include "MapTypes.h"
#include "PortalQueryParametersForItems.h"
#include "PortalTypes.h"
#include "Error.h"

#include <QFuture>

using namespace Esri::ArcGISRuntime;

IntegratedWindowsAuthentication::IntegratedWindowsAuthentication(QObject* parent /* = nullptr */):
  QObject(parent),
  m_map(new Map(BasemapStyle::ArcGISTopographic, this)),
  query(new PortalQueryParametersForItems())
{
  query->setTypes(QList<PortalItemType>() << PortalItemType::WebMap);
}

IntegratedWindowsAuthentication::~IntegratedWindowsAuthentication() = default;

void IntegratedWindowsAuthentication::init()
{
  // Register C++ classes as QML types
  qmlRegisterType<MapQuickView>("Esri.Samples", 1, 0, "MapView");
  qmlRegisterType<IntegratedWindowsAuthentication>("Esri.Samples", 1, 0, "IntegratedWindowsAuthenticationSample");
}

MapQuickView* IntegratedWindowsAuthentication::mapView() const
{
  return m_mapView;
}

// Set the view (created in QML)
void IntegratedWindowsAuthentication::setMapView(MapQuickView* mapView)
{
  if (!mapView || mapView == m_mapView)
    return;

  m_mapView = mapView;
  m_mapView->setMap(m_map);

  emit mapViewChanged();
}

void IntegratedWindowsAuthentication::searchIwaSecurePortal(const QString& url)
{
  if (m_iwaSecurePortal && m_iwaSecurePortal->loadStatus() == LoadStatus::FailedToLoad)
  {
    m_iwaSecurePortal = nullptr;
  }
  m_iwaSecurePortal = new Portal(url, true, this);

  connect(m_iwaSecurePortal, &Portal::doneLoading, this, &IntegratedWindowsAuthentication::securePortalDoneLoading);

  m_loadingIndicator = true;
  emit isLoadingChanged();

  m_iwaSecurePortal->load();
}

void IntegratedWindowsAuthentication::loadSelectedWebmap(int index)
{
  if (!m_webmaps)
    return;

  if (m_map)
    delete m_map;

  m_map = new Map(m_webmaps->at(index), this);

  m_mapView->setMap(m_map);
}

void IntegratedWindowsAuthentication::errorAccepted()
{
  m_mapLoadError.clear();
  emit mapLoadErrorChanged();
}

QAbstractListModel* IntegratedWindowsAuthentication::webmapListModel() const
{
  return m_webmaps;
}

void IntegratedWindowsAuthentication::securePortalDoneLoading(const Error& loadError)
{
  if (!loadError.isEmpty())
  {
    m_mapLoadError = loadError.message();
    m_loadingIndicator = false;

    if(m_webmaps)
      m_webmaps = nullptr;

    emit webmapListModelChanged();
    emit isLoadingChanged();
    emit mapLoadErrorChanged();
    return;
  }

  m_iwaSecurePortal->findItemsAsync(*query).then(
  [this](PortalQueryResultSetForItems* result)
  {
    searchItemsCompleted(result);
  });
}

void IntegratedWindowsAuthentication::searchItemsCompleted(PortalQueryResultSetForItems* result)
{
  if(!result)
    return;

  if(m_webmaps)
    m_webmaps = nullptr;

  m_webmaps = result->itemResults();
  emit webmapListModelChanged();

  m_loadingIndicator = false;
  emit isLoadingChanged();
}