Skip To Content

Configuring security in the Event Editor

Configuring security through Integrated Windows Authentication

You can secure access to the Event Editor web app using Integrated Windows Authentication (IWA). When you use IWA, logins are managed through Microsoft Active Directory. Users do not sign in and out of Event Editor; instead, when they start the app in a browser, they are signed in using the same accounts they used to log in to Windows.

To use Event Editor with Integrated Windows Authentication, an ArcGIS Web Adaptor should be deployed for both Portal for ArcGIS and ArcGIS Server on the same web server machine.

To setup Portal for ArcGIS with IWA, see Use Integrated Windows Authentication with your portal.

To set up a federated server with Portal for ArcGIS using IWA, see Federate an ArcGIS Server site with your portal.

  1. Open your Event Editor config.json file. Browse to Security. Make sure type is set to none.
  2. Remove the port number from all REST URLs used in your Event Editor configuration.

    All REST URLs used in your Event Editor configuration must use the same server hosting the ArcGIS Web Adaptor (IIS).

Configuring security through OAuth 2.0 using Portal for ArcGIS or ArcGIS Online

You can secure access to Event Editor using a OAuth 2.0 based authentication mechanism. To enable OAuth 2.0 based authentication, you must first register the Event Editor web app with either Portal for ArcGIS or ArcGIS Online. If you would like to use a secured map service, you must register the Event Editor web app with Portal for ArcGIS to federate your ArcGIS Server site with Portal to support single sign-in.

  1. Sign in to your Portal for ArcGIS or ArcGIS Online account to add and register the Event Editor web app.
  2. Open your Event Editor configuration file.
  3. Browse to security and set type to portal.
    Note:

    By default, agsTokenExpirationMinutes is set to one week. The refresh token is not renewed once it expires, and you will be prompted to sign in to your portal upon refresh token expiration.

  4. Specify the portalAppId.

Start the Event Editor web app in a web browser. Use your portal credentials to sign in. Once the supplied credentials are verified by Portal for ArcGIS or ArcGIS Online, you will be directed to a secure Event Editor environment.