search

Esri / geoportal-server-catalog

Esri Geoportal Server is a next generation open-source metadata catalog and editor, based on elasticsearch.
https://www.esri.com/en-us/arcgis/products/geoportal-server/overview
Apache License 2.0
97 stars 60 forks source link

Problems with Portal for ArcGIS-authentication #335

Closed scma-esrich closed 2 years ago

scma-esrich commented 3 years ago

Following your guidelines from https://github.com/Esri/geoportal-server-catalog/wiki/Security-configuration-ArcGIS I still have trouble to implement it correctly.

The app-registration on the Portal-side works without any problems and Portal's login-interface is propagated through. However, when I enter valid credentials, in the Geoportal Server-GUI there still is the "Sign In"-hyperlink to the top-right and looking at the request, I get the following error: image

Do I need to add the users to some form of user-repository on the geoportal-server-catalog side, although I want to use ArcGIS-authentication?

Are the two parameters geoportalPublishersGroupId and geoportalAdministratorsGroupId mandatory or optional and only to be used in combination with https://github.com/Esri/geoportal-server-catalog/wiki/Group-Access-Configuration?

Thanks in advance for any hints!

G-NOCM commented 2 years ago

@scma-esrich Did you end up resolving this issue? We are experiencing the same with a project we are working on and would appreciate any advice you could provide. Many thanks in advance.

scma-esrich commented 2 years ago

@G-NOCM, sadly I couldn't invest more time to investigate this issue further back then and until then.

@mhogeweg, as you seem pretty active in this project, maybe you could help out?

G-NOCM commented 2 years ago

Thank you. Any help would be appreciated.

mhogeweg commented 2 years ago

hi, you can use geoportalAdministratorsGroupId and geoportalPublishersGroupId to designate groups in ArcGIS Portal who's members will be considered administrators and publishers in Geoportal Server respectively. If you set these groups, the membership of the user of these groups determines their role in Geoportal Server. If you do not set these groups, the role of the user in Geoportal Server will depend directly on the role of that user in ArcGIS Portal, as follows: