Uses Windows credentials to access services hosted on a portal secured with Integrated Windows Authentication (IWA).
Use case
IWA, which is built into Microsoft Internet Information Server (IIS), works well for intranet applications, but isn't always practical for internet apps.
How to use the sample
Enter the URL to your IWA-secured portal in the text field at the top of the screen and click "Search Secure". You will be prompted for a username (including domain, such as username@DOMAIN or domain\username), and password. On Windows it will automatically use your current login credentials. If you authenticate successfully, portal item results will display in the combo box below. Select a web map item and click the "Load Web Map" button to display it in the map view.
How it works
- The
AuthenticationManager
object is configured with a challenge handler that will prompt for a Windows login (username, password, and domain) if a secure resource is encountered. - When a search for portal items is performed against an IWA-secured portal, the challenge handler creates an
Credential
object from the information entered by the user. - If the user authenticates, the search returns a list of web maps (
PortalItem
) and the user can select one to display as aMap
. - On some platforms, the current Windows account is used by default and a login prompt will not be shown if it can authenticate successfully.
Relevant API
- AuthenticationManager
- Credential
- Portal
About the data
This sample searches for web map portal items on a secure portal. To successfully run the sample, you need:
- Access to a portal secured with Integrated Windows Authentication that contains one or more web map items.
- A login that grants you access to the portal.
Additional information
More information about IWA and its use with ArcGIS can be found at the following links:
Tags
authentication, security, Windows
Sample Code
// [WriteFile Name=IntegratedWindowsAuthentication, Category=CloudAndPortal]
// [Legal]
// Copyright 2019 Esri.
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
// http://www.apache.org/licenses/LICENSE-2.0
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
// [Legal]
#ifdef PCH_BUILD
#include "pch.hpp"
#endif // PCH_BUILD
#include "IntegratedWindowsAuthentication.h"
#include "Map.h"
#include "MapQuickView.h"
#include "Portal.h"
#include "PortalItem.h"
#include "PortalQueryResultSetForItems.h"
#include "PortalItemListModel.h"
using namespace Esri::ArcGISRuntime;
IntegratedWindowsAuthentication::IntegratedWindowsAuthentication(QObject* parent /* = nullptr */):
QObject(parent),
m_map(new Map(BasemapStyle::ArcGISTopographic, this)),
query(new PortalQueryParametersForItems())
{
query->setTypes(QList<PortalItemType>() << PortalItemType::WebMap);
}
IntegratedWindowsAuthentication::~IntegratedWindowsAuthentication() = default;
void IntegratedWindowsAuthentication::init()
{
// Register C++ classes as QML types
qmlRegisterType<MapQuickView>("Esri.Samples", 1, 0, "MapView");
qmlRegisterType<IntegratedWindowsAuthentication>("Esri.Samples", 1, 0, "IntegratedWindowsAuthenticationSample");
}
MapQuickView* IntegratedWindowsAuthentication::mapView() const
{
return m_mapView;
}
// Set the view (created in QML)
void IntegratedWindowsAuthentication::setMapView(MapQuickView* mapView)
{
if (!mapView || mapView == m_mapView)
return;
m_mapView = mapView;
m_mapView->setMap(m_map);
emit mapViewChanged();
}
void IntegratedWindowsAuthentication::searchIwaSecurePortal(const QString& url)
{
if (m_iwaSecurePortal && m_iwaSecurePortal->loadStatus() == LoadStatus::FailedToLoad)
{
m_iwaSecurePortal = nullptr;
}
m_iwaSecurePortal = new Portal(url, true, this);
connect(m_iwaSecurePortal, &Portal::doneLoading, this, &IntegratedWindowsAuthentication::securePortalDoneLoading);
connect(m_iwaSecurePortal, &Portal::findItemsCompleted, this, &IntegratedWindowsAuthentication::searchItemsCompleted);
m_loadingIndicator = true;
emit isLoadingChanged();
m_iwaSecurePortal->load();
}
void IntegratedWindowsAuthentication::loadSelectedWebmap(int index)
{
if (!m_webmaps)
return;
if (m_map)
delete m_map;
m_map = new Map(m_webmaps->at(index), this);
m_mapView->setMap(m_map);
}
void IntegratedWindowsAuthentication::errorAccepted()
{
m_mapLoadError.clear();
emit mapLoadErrorChanged();
}
QAbstractListModel* IntegratedWindowsAuthentication::webmapListModel() const
{
return m_webmaps;
}
void IntegratedWindowsAuthentication::securePortalDoneLoading(const Error& loadError)
{
if (!loadError.isEmpty())
{
m_mapLoadError = loadError.message();
m_loadingIndicator = false;
if(m_webmaps)
m_webmaps = nullptr;
emit webmapListModelChanged();
emit isLoadingChanged();
emit mapLoadErrorChanged();
return;
}
m_iwaSecurePortal->findItems(*query);
}
void IntegratedWindowsAuthentication::searchItemsCompleted(const PortalQueryResultSetForItems* result)
{
if(!result)
return;
if(m_webmaps)
m_webmaps = nullptr;
m_webmaps = result->itemResults();
emit webmapListModelChanged();
m_loadingIndicator = false;
emit isLoadingChanged();
}