Open BrendanEsri opened 2 years ago
Hi @BrendanEsri,
The module will update the portal oauth arcgisonline app redirect uri list with the hostname of the federated ServerAdminURL. So in this case since server web adaptor admin access is enabled, and ExternalLoadBalancer is set, the federated ServerAdminURL is likely https://DRtesting1081.profservices.geocloud.com/geoevent
, which means the module will add DRtesting1081.profservices.geocloud.com
to the portal oauth arcgisonline redirect list. This allows access to ArcGIS Server Manager via https://DRtesting1081.profservices.geocloud.com/geoevent/manager
.
However, since ArcGIS GeoEvent Manager is https://gdscgeoeventdrx2.pstransportation.com:6143/geovent/manager, it will throw an invalid uri redirect error (as you've pointed out). In order to have the module add gdscgeoeventdrx2.pstransportation.com
to the portal oauth arcgisonline redirect list, the federated ServerAdminURL would need to be https://gdscgeoeventdrx2.pstransportation.com:6443/arcgis/admin
which can be achieved by either setting the ConfigData.Server.InternalLoadBalancer attribute to gdscgeoeventdrx2.pstransportation.com
, or disabling admin access on the web adaptor. But this then would result in an invalid redirect uri error when navigating to https://DRtesting1081.profservices.geocloud.com/geoevent/manager
.
This is a limitation of the module due to the ArcGIS GeoEvent Server being a special case because it doesn't allow direct access to the manager page via the web adaptor (whereas other federated server roles do allow access via the web adaptor).
In order to support both scenarios the module would need to accept a user defined array of hostnames to add to the oauth redirect list. This is something we could potentially look into in future releases of the module. However, for now the workaround is to manually add the missing hostname(s) to the portal oauth arcgisonline app redirect uri list.
Thanks, Cameron K.
Community Note
Module Version
Affected Resource(s)
Configuration Files
Expected Behavior
Should be able to login to the web socket url to manager https://gdscgeoeventdrx2.pstransportation.com:6143/geoevent/manager with proper redirect to portal to login and get a token
Actual Behavior
When accessing https://gdscgeoeventdrx2.pstransportation.com:6143/geoevent/manager it shows invalid redirect_uri.
Steps to Reproduce
With PowerShell DSC, spin ArcGIS Enterprise json then spin GeoEvent json. for some reason the arcgisonline app info doesnt include the web socket url of the federated geoevent server. once i update the arcgisonline app info with that url, it works:
Important Factoids
References