Embed Size (px)
Citation preview
Portal for ArcGIS – Beste praksis
Morten Grude
AGOL eller Portal?
DemoPortal
Sette opp Portal - Administrative oppgaver
Administrative oppgaver
• Tilpasse Portal “hjemmeside”
• Sette opp Bakgrunnskart og Utility tjenester
• Aktivere ArcGIS Pro licenser
• Kontroll på Portal aktiviteter med Activity Dashboard
My Organization Page
Configuring Portal for ArcGIS home page
Background
image
BannerName
Featured
content
Logo
Description
Enabling Custom Basemaps in Portal
• Legg til service to Portal map viewer
• Lagre som nytt kart
• Legg til kartet til en egen gruppe
• Velg gruppa for Basemaps
Basemaps
Enabling Custom Utility Services in Portal
• Ressurser som Portal trenger
• Kan bruke egne tjenester
• Kan bruke ArcGIS Online resurser vha proxy
• Legg til World Geocoding og Route Services som Portal items
• Lagre ArcGIS Online credentials med items
• Del med Organization
• I Utility Services valget, bruk Portal proxy URL som URL til
World Geocoding or Route ServiceUtility services
DemoAdministrative oppgaver i Portal
Enabling GeoEnrichment Services in Portal
• Get information about the people, places and businesses ina specific area or within a certain distance or drive time from a location
• No UI method to reference these services in Portal
• Enabled with the Sharing REST API,
• https://webadaptor.domain.com/portal/sharing/rest
• Help topic: Enabling premium helper services
Portal for ArcGIS: Custom Roles
• Gir mer fleksibilitet for å styre hva brukerne får lov til å gjøre
• My Organization > Edit Settings > Roles > Create Role
Licensing ArcGIS Pro with Portal for ArcGIS 10.3.x: Manage ArcGIS Pro licenses for your organization
• ArcGIS Pro is licensed with Portal for ArcGIS + ArcGIS License Manager
• Setup:
1. In ArcGIS License Manager,
• Configure with license file (.lic) → obtained from My.Esri.com
• Generate a Portal configuration file (.json) from license file
2. In Portal Administrator Directory,
• Import Portal configuration file
• https://portal.domain.com:7443/arcgis/portaladmin
3. Use Portal to manage ArcGIS Pro licenses to Named Users
• New controls available on My Organization page
Licensing ArcGIS Pro with Portal for ArcGIS
10.3.x Activity Dashboard Activity-based metrics and real-time reports about your Portal
DemoActivity Dashboard
Avansert Portal tilpassningsvalg Config.js file
• Legg til sikkerhetsklassifiserings merker
• Legg til footnote linker
• Begrens Min Organisasjon til kun Portal Admin
• Enable/Disable visning av sosial media linker
• Enable/Disable web søk
• Enable/Disable muligheten for nye brukere til å “Aktivere ny konto”
Avansert Portal tilpassningsvalg (config.js file)
• Edit config.js filen for videre tilpasninger av Portal UI
• Link: <PortalInstallDirectory>\customizations\10.3.1\webapps\arcgis#home\js\arcgisonline
• Hjelp: Setting Advanced Portal Options
• Use Case: Når man konfigurerer et frakoblet miljø eller tilpasse Portal til å møte organisasjonskrav
• Vær forsiktig – Ta Backup!!
• Ved oppgradering overskrives denne filen og man må selv vedlikeholde endringer
DemoConfig.js
Portal for ArcGISApplikasjonsserveren for WebGIS
• Arkitektur
• Sikkerhet
• Skalering
Portal for ArcGIS - Arkitektur
Desktop Web Device
Server Online Content and Services
portal
Apps
portal
GIS Servers
Portal for ArcGIS
GIS ServerEnterprise geodatabase,ArcGIS Data Store
Client applicationsE.g.: Collector, Dashboard, Explorer,Esri Maps for … Apps, and Web AppBuilder
Web GIS Deployment Patterns
portal GIS Servers Ready to useContent
SaaS
Software ArcGIS Data
Appliance
ArcGIS
ServerPortal
for ArcGIS
ArcGIS Online
ServicesArcGIS Online(Hosted Servers)
ArcGIS Online(portal)
Apps
A
Web GIS Deployment Patterns
portal GIS Servers Ready to useContent
SaaS
Software ArcGIS Data
Appliance
ArcGIS
ServerPortal
for ArcGIS
ArcGIS Online
ServicesArcGIS Online(Hosted Servers)
ArcGIS Online(portal)
AGOL
Web GIS Deployment Patterns
portal GIS Servers Ready to useContent
SaaS
Software ArcGIS Data
Appliance
ArcGIS
ServerPortal
for ArcGIS
ArcGIS Online
ServicesArcGIS Online(Hosted Servers)
ArcGIS Online(portal)
AGOL
Web GIS Deployment Patterns - Behind
portal GIS Servers Ready to useContent
Software ArcGIS Data
Appliance
ArcGIS
ServerPortal
for ArcGIS
ArcGIS Online
ServicesArcGIS Online(Hosted Servers)
ArcGIS Online(portal)
A
Portal
Web GIS Deployment Patterns - Connected
portal GIS Servers Ready to useContent
Software ArcGIS Data
Appliance
ArcGIS
ServerPortal
for ArcGIS
ArcGIS Online
ServicesArcGIS Online(Hosted Servers)
ArcGIS Online(portal)
Portal
Web GIS Deployment Patterns - Shared
portal GIS Servers Ready to useContent
SaaS
Software ArcGIS Data
Appliance
ArcGIS
ServerPortal
for ArcGIS
ArcGIS Online
ServicesArcGIS Online(Hosted Servers)
ArcGIS Online(portal)
Singel Deployment
One
Machine
Network
Portal for ArcGIS
Website
Applications
Portal Services API
Repository
ArcGIS Server
GIS Services
Web Server
Portal
Web Adaptor
Client Applications
& Browsers
ArcGIS
Web Adaptor
Klienter
Web og mobile apps
ArcGIS Desktop
ArcGIS Server
/portal Web adaptor - IIS
ArcGIS for Server
Win Auth
Po
rt 644
3
Databaser og
fillagring
Lokal fillagring/ DB Server
ArcGIS for Desktop
Portal
Portal for ArcGIS
Win Auth
Po
rt 744
3
Internally Portal used ports by 7005, 7099, 7199, and 7654
Web Adaptor
/arcgis Web adaptor - IIS
AD Innlogging AD kobling til Tjenester Win auth
Web Adaptor
https//domain/arcgis
https//domain/portal
Port 443 / https
Port 443 / https
Portal for ArcGISApplikasjonsserveren for web GIS
• Arkitektur
• Sikkerhet
• Skalering
Valg av Identity Store for Portal for ArcGIS
SAMLActive
Directory or LDAP
Built-in
If the org has an Identity provider
If the users are mostly or all internal
If the users are mostly external
Securing ArcGIS for Server and Portal for ArcGIS
Hva kan sikres og hvor?
Securing ArcGIS for Server and Portal for ArcGIS
Portal for ArcGIS Portal Items
ArcGIS for Server Web Services
Web map Web appData
• Kryptering av data trafikk med SSL er standard i de fleste organisasjoner
• Portal for ArcGIS installerer et selv signert sertifikat for HTTPS port 7443
• Web adapteret hindrer usikker forbindelser “untrusted connections”
• For å etablere sikker forbindelse bruker man ekte sertifikater på web server
Portal for
ArcGIS
CA Signed
SSL Certificate
https://webserver.com/portal 7443/portal
Setting up SSL Certificates and Trusts
Portal Administrator Directory
• REST API for å gjøre server administrator oppgaver
https://<machine_name>/<webadaptor>/portaladmin/
• Konseptuelt likt ArcGIS Server Administrator Directory
Sertifikater
Setting up SSL Certificates and Trusts
• For ekstern trust, imporer Root og Intermediate certificates into the cacerts keystore
• Restart Portal etter endringer til cacerts file
• Hjelp: Configuring the portal to trust certificates from your certifying authority
Establishing Trust with other Servers
Portal – Server Federation
• Gir singel sign-on SSO mellom Portal og Server
• Tilgangen blir administrert i Portal
• ArcGIS Server site må HTTPS enabled
Brukes:
• Ønsker om SSO user experience
Brukes IKKE
• Når Portal/Server er på forsjellige fysiske lokasjoner
• Portal/Server har forskjellige versjoner
Portal for ArcGIS Identity store
ArcGIS Server
Portal for ArcGISApplikasjonsserveren for web GIS
• Arkitektur
• Sikkerhet
• Skalering
• Hosted – Esri Datastore
• Managed
Lagring
Portal for ArcGIS
Website
Applications
Portal Services API
Repository
ArcGIS Server
GIS Services
Web Server
Portal
Web Adaptor
ArcGIS
Web Adaptor
• Krav når ønske om hosted services i Portal
• Feature services
• Tiled services
• 3D scene services (10.3.1)
• Eksempel arbeidsflyt
• Publiser innhold til Portal
• Del innhold fra Esri Maps for … Apps
• Bruker ArcGIS Server med ArcGIS Data Store
Portal for ArcGIS + Hosting Server
Portal for ArcGIS Identity store
ArcGIS Server
ArcGIS Data Store
DemoDatastore
ArcGIS - Hosted Server
Web Adaptor
Portal for ArcGIS
Web Adaptor
ArcGIS
Server
ArcGIS
Server
Server Directories
&
Config Store
HA Hosting ArcGIS Server HA ArcGIS Data Store (Managed Database)
o Requires internal web adaptors for portal to reach servers on 6080/6443
Federation
ArcGIS Server
External Web Adaptor
ArcGIS
Server
ArcGIS
Server
Srv Dirs &
Config Store
Internal Web Adaptor
(6080/6443)
Federated ArcGIS Server
Multi-node server
Full WebGIS HA
Web Adaptor
ArcGIS
Server
ArcGIS
Server
Server Directories
&
Config Store
HA Portal HA Hosting ArcGIS Server HA ArcGIS Data Store (Managed database) HA Federated ArcGIS Server No single point of failure
o Internal load balancers are needed between server to portal and from portal to server
Federated ArcGIS Server
External Web Adaptor
ArcGIS
Server
ArcGIS
Server
Srv Dirs &
Config Store
Hosting Server
Internal Web Adaptor For
Server (6080/6443)
Portal for ArcGIS
External Web Adaptor
PortalPortal
Content Federation
Internal Web Adaptor For
Portal (7080/7443)
Portal for ArcGIS High Availability
Portal for ArcGIS
10.4
• Vector Tiles - ArcGIS Pro 1.2
• Analyse tools
• Custom Print layouts
• Metadata support
• Windows 10 OS, IIS 10 Edge Browser
• .Net 4.5
• Enklere metoder for å enable HA
• Navigator støtte
Highlights – Portal for ArcGIS 10.4
Navigator Maps in Portal for ArcGIS
• Portal has a predefined group called Navigator Maps
• Contains item listings for all Esri mobile map packages
• Items are NOT available for download, until the mmpks are licensed and downloaded from My Esri, then registered with Portal
Web AppBuilder i Portal 10.4 – 5 Ny templates
Billboard Box Dart
Jewelry Box Launchpad
Web AppBuilder i Portal 10.4 – 12 Nye Widgets
Analysis Time slider Swipe Search Stream Summary
IncidentAnalysis
GeoLookup Batch Attribute
Editor
ImageMeasurement
FeatureReport
ReviewerDashboard
