Integrated windows authentication

View inC++QMLView on GitHubSample viewer app

Uses Windows credentials to access services hosted on a portal secured with Integrated Windows Authentication (IWA).

screenshot

Use case

IWA, which is built into Microsoft Internet Information Server (IIS), works well for intranet applications, but isn't always practical for internet apps.

How to use the sample

Enter the URL to your IWA-secured portal in the text field at the top of the screen and click "Search Secure". You will be prompted for a username (including domain, such as username@DOMAIN or domain\username), and password. On Windows it will automatically use your current login credentials. If you authenticate successfully, portal item results will display in the combo box below. Select a web map item and click the "Load Web Map" button to display it in the map view.

How it works

  1. The AuthenticationManager object is configured with a challenge handler that will prompt for a Windows login (username, password, and domain) if a secure resource is encountered.
  2. When a search for portal items is performed against an IWA-secured portal, the challenge handler creates an Credential object from the information entered by the user.
  3. If the user authenticates, the search returns a list of web maps (PortalItem) and the user can select one to display as a Map.
  4. On some platforms, the current Windows account is used by default and a login prompt will not be shown if it can authenticate successfully.

Relevant API

  • AuthenticationManager
  • Credential
  • Portal

About the data

This sample searches for web map portal items on a secure portal. To successfully run the sample, you need:

  • Access to a portal secured with Integrated Windows Authentication that contains one or more web map items.
  • A login that grants you access to the portal.

Additional information

More information about IWA and its use with ArcGIS can be found at the following links:

Tags

authentication, security, Windows

Sample Code

IntegratedWindowsAuthentication.cppIntegratedWindowsAuthentication.cppIntegratedWindowsAuthentication.hIntegratedWindowsAuthentication.qml
Use dark colors for code blocksCopy
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
// [WriteFile Name=IntegratedWindowsAuthentication, Category=CloudAndPortal]
// [Legal]
// Copyright 2019 Esri.

// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
// http://www.apache.org/licenses/LICENSE-2.0

// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
// [Legal]

#ifdef PCH_BUILD
#include "pch.hpp"
#endif // PCH_BUILD

#include "IntegratedWindowsAuthentication.h"

#include "Map.h"
#include "MapQuickView.h"
#include "Portal.h"
#include "PortalItem.h"
#include "PortalQueryResultSetForItems.h"
#include "PortalItemListModel.h"
#include "MapTypes.h"
#include "PortalQueryParametersForItems.h"
#include "PortalTypes.h"
#include "Error.h"

using namespace Esri::ArcGISRuntime;

IntegratedWindowsAuthentication::IntegratedWindowsAuthentication(QObject* parent /* = nullptr */):
  QObject(parent),
  m_map(new Map(BasemapStyle::ArcGISTopographic, this)),
  query(new PortalQueryParametersForItems())
{
  query->setTypes(QList<PortalItemType>() << PortalItemType::WebMap);
}

IntegratedWindowsAuthentication::~IntegratedWindowsAuthentication() = default;

void IntegratedWindowsAuthentication::init()
{
  // Register C++ classes as QML types
  qmlRegisterType<MapQuickView>("Esri.Samples", 1, 0, "MapView");
  qmlRegisterType<IntegratedWindowsAuthentication>("Esri.Samples", 1, 0, "IntegratedWindowsAuthenticationSample");
}

MapQuickView* IntegratedWindowsAuthentication::mapView() const
{
  return m_mapView;
}

// Set the view (created in QML)
void IntegratedWindowsAuthentication::setMapView(MapQuickView* mapView)
{
  if (!mapView || mapView == m_mapView)
    return;

  m_mapView = mapView;
  m_mapView->setMap(m_map);

  emit mapViewChanged();
}

void IntegratedWindowsAuthentication::searchIwaSecurePortal(const QString& url)
{
  if (m_iwaSecurePortal && m_iwaSecurePortal->loadStatus() == LoadStatus::FailedToLoad)
  {
    m_iwaSecurePortal = nullptr;
  }
  m_iwaSecurePortal = new Portal(url, true, this);

  connect(m_iwaSecurePortal, &Portal::doneLoading, this, &IntegratedWindowsAuthentication::securePortalDoneLoading);
  connect(m_iwaSecurePortal, &Portal::findItemsCompleted, this, &IntegratedWindowsAuthentication::searchItemsCompleted);

  m_loadingIndicator = true;
  emit isLoadingChanged();

  m_iwaSecurePortal->load();
}

void IntegratedWindowsAuthentication::loadSelectedWebmap(int index)
{
  if (!m_webmaps)
    return;

  if (m_map)
    delete m_map;

  m_map = new Map(m_webmaps->at(index), this);

  m_mapView->setMap(m_map);
}

void IntegratedWindowsAuthentication::errorAccepted()
{
  m_mapLoadError.clear();
  emit mapLoadErrorChanged();
}

QAbstractListModel* IntegratedWindowsAuthentication::webmapListModel() const
{
  return m_webmaps;
}

void IntegratedWindowsAuthentication::securePortalDoneLoading(const Error& loadError)
{
  if (!loadError.isEmpty())
  {
    m_mapLoadError = loadError.message();
    m_loadingIndicator = false;

    if(m_webmaps)
      m_webmaps = nullptr;

    emit webmapListModelChanged();
    emit isLoadingChanged();
    emit mapLoadErrorChanged();
    return;
  }

  m_iwaSecurePortal->findItems(*query);
}

void IntegratedWindowsAuthentication::searchItemsCompleted(PortalQueryResultSetForItems* result)
{
  if(!result)
    return;

  if(m_webmaps)
    m_webmaps = nullptr;

  m_webmaps = result->itemResults();
  emit webmapListModelChanged();

  m_loadingIndicator = false;
  emit isLoadingChanged();
}

Your browser is no longer supported. Please upgrade your browser for the best experience. See our browser deprecation post for more details.