ArcGIS Enterprise Logins with web tier auth (IWA/PKI)

[jpeterson]

Discussed in #38

^{Originally posted by mgress12 January 14, 2022}
Does this app support enterprise portals configured with IWA/single sign on? The old ArcGIS online assistant had an option to login with IWA.
I've added and registered the app to Portal. Double checked the redirect URI but not having luck connecting.

I get a prompt for an approval that finds my credentials in Portal. After approving I'm returned to ArcGIS Assistant with only the top menu bar visible and the rest of the screen is grayed out.

Here are the registered app settings:

Thanks!
Matt

[mdlong]

+1 on this feature. I am unable to use this tool with my Portal until web tier auth is added.

[joeyHarig]

@nheminger Are there any updates on this enhancement request? I need PKI login support for a project, so I'm willing to take on any remaining dev work.

[nheminger]

@joeyHarig No updates recently. I have an initial prototype of the changes that will need to be made in the background but don't have any frontend GUI changes made yet. I can send over what I have so far and go over it with you.

[joeyHarig]

@nheminger That would be great! Do you have a branch with your changes?

[bchileen]

+1 on this feature as well, I would love to use this app but until PKI login is supported, im unable to link to my portals.

[ftm610]

+1 @jpeterson @nheminger when will IWA Portals be supported?

Same behavior with Portal 10.9.1 as described by OP. No success adding website to Portal's Allowed Origins list or adding website as registered application item to Portal's App Launcher.

We also see this console log error reported by others...
accountManagerUtils.js:241 Error getting User Session (completeOAuth). Error reading property may result from app redirecting before operation can read token hash in url. Error: Could not create account object. This could be due to UserSession.getUser(). TypeError: Failed to fetch

This Portal can authenticate successfully with the old AGO Assistant site using both "PKI or IWA Login" and "OAuth Login" options.

[JPStupfel]

I can verify this is still an issue even after the Rest JS update.

To repro I attempt to authenticate to https://jctest1.esri.com/ which uses IWA. I am redirected to the log in page and not authenticated.

On the contrary, if I authenticate using jctest4 I am successful.