ArcGIS Enterprise

What’s New in ArcGIS Enterprise 10.8.1: Saving Credentials in Collaboration

A common workflow in distributed collaborations between ArcGIS Enterprise organizations is to share map, feature, and image services by reference. In these cases the data isn’t copied, but the service URL is made available to all Enterprise organizations participating in the collaboration. This allows it to be searched for and added to web maps and web apps. That’s great, but if the service is secured (not shared with everyone), users trying to access the service must provide credentials to view the data.  These are not their own credentials but rather credentials for a user from the originating Enterprise organization. In many cases, this requires administrators to set up additional accounts and requires users to remember another set of credentials, which can be a lot of overhead. Many organizations asked for a way to make these shared services accessible without needing to provide credentials.

At 10.8 we added the ability to save Viewer credentials for all services shared by reference using distributed collaboration. While possible in 10.8, it was a bit difficult to find that resource in the REST API.

At 10.8.1 we added the option to make these changes from directly within the Enterprise portal. This means a user with the privilege ‘Collaborations’ can edit a collaboration workspace and enable or disable this feature. Let’s take a closer look.
In the example below, from within the Enterprise portal under Organization > Settings > Collaborations, a ‘Sharing_Services’ collaboration has already been established.

Existing Collaboration

When I click on the Sharing_Services collaboration, I see the list of workspaces defined for the collaboration.

Collaboration Workspace

If I click on the workspace, information about the workspace is displayed including the new option to “Allow participants to view services without signing into this portal”.  The new option is circled below.

Workspace details

Click on Edit to add, remove, or update these credentials.

Set viewer credentials

The credentials entered here must belong to a member assigned a Viewer user type and the member must have access to the group associated with the workspace.  If credentials are entered for a member with any other user type assigned or the member does not have access to the group, you will receive an error.

Once saved, these credentials are encrypted and used by the other participating Enterprise organizations.  Any existing services that have already been shared with collaboration groups will be updated with the credentials and any new service shared will have the credentials saved by default.  When a user accesses the shared services in one of the recipient Enterprise organizations, they will no longer be asked to provide credentials, providing a seamless experience.

If the credentials are removed from the workspace, the existing services will be updated and restored to the original urls.  A user that accesses the shared service from a recipient Enterprise organization will be required to enter credentials to view the service.

There are a few things to remember:

More information is available in the ArcGIS Enterprise help documentation including details on how to add the Viewer credentials to a workspace as a collaboration host or as a collaboration guest.

About the author

Jeff is a Security Engineer on the ArcGIS Enterprise team. He has been with Esri since 2009. When not at Esri, he enjoys outdoor activities including camping, hiking, and snowboarding.

Notify of
Inline Feedbacks
View all comments

Next Article

ArcGIS Enterprise on Kubernetes at the 2024 Esri User Conference

Read this article