Hi @dan_mbc

Correct URL should be https://server.domain.net/portal/

If the Portal has been set up with SAML authentication, then you can use OAuth.

Let me know if the URL resolves the issue or else I can help you with setting OAuth with your portal

Thanks @rahulsharma

I have just tried it again using the URL you suggest (and checked in internet browser to ensure I had it correct) and it still isn't connecting but I am not sure which authentication I should be using. I know our portal uses single sign on/windows authentication, but not sure if that classes as IWA or LDAP, but then I see you mention SAML and using OAuth, but within the writer settings I don't see any of these options:

Apologies as I am not clued up on this authentication stuff, so sorry if this is something simple I am not understanding.

It could be I need to speak to ICT Infrastrucutre as it could be the firewall, but I wanted to make sure I had tried everything with the correct info.

Thanks

Dan

Hi @dan_mbc, knowing the correct authentication would use, but if you set up OAuth 2.0, FME does not care much about which authentication method is used. The authentication method is called "Web Service" from the drop-down list.

It is possible that there can be some firewall restrictions, but most organizations have the portal set up on-premises so the firewall should not have any interference(as it is local network), but feel free to confirm that with your team.

For setting up OAuth for ArcGIS Portal there are 2 essential parts (supported with 2019.2.3+)

• Set up an OAuth app for your ArcGIS portal

Log-in your portal in a web browser and click on Content.

1. Under My Content --> Click on Add Item
2. From the drop-down menu select "An Application"
3. Next Dialog, Select "Application", Enter Title and Tags
4. Click on "Add Item" to complete see below
5. Once the app is created it will appear in your contents list. Click on the App --> Settings --> App Registration --> Register Info
6. Note Client Id and Secret which will be required later.

• Configure a WebService using a template

Next step is to create a web service in FME Desktop

1. Open FME Workbench, Go to Tools -> FME Options --> Web Connections --> Manage Services...
2. Click on the "+" drop-down menu on the bottom left corner Select Create From --> "Esri ArcGIS Portal(template)"
3. This will load an empty template, give a Web Service Name of your choice(e.g. portal name)
4. Update the URLs with your portal name for Authorization Parameters, Retrieve Token Parameters, Refresh Token Parameters.
5. Add the Client Id and Client Secret value from the previous step and save the workspace.
6. In Reader, ensure that Portal URL matches the WebService URL, set the Authentication Type Web Service.
7. For ArcGIS Portal Connection, select the Service Name previously created and Click "Authenticate... ", Select Feature Service

Let me know if this helps connecting to your portal.

Hi @dan_mbc, knowing the correct authentication would use, but if you set up OAuth 2.0, FME does not care much about which authentication method is used. The authentication method is called "Web Service" from the drop-down list.

It is possible that there can be some firewall restrictions, but most organizations have the portal set up on-premises so the firewall should not have any interference(as it is local network), but feel free to confirm that with your team.

For setting up OAuth for ArcGIS Portal there are 2 essential parts (supported with 2019.2.3+)

• Set up an OAuth app for your ArcGIS portal

Log-in your portal in a web browser and click on Content.

1. Under My Content --> Click on Add Item
2. From the drop-down menu select "An Application"
3. Next Dialog, Select "Application", Enter Title and Tags
4. Click on "Add Item" to complete see below
5. Once the app is created it will appear in your contents list. Click on the App --> Settings --> App Registration --> Register Info
6. Note Client Id and Secret which will be required later.

• Configure a WebService using a template

Next step is to create a web service in FME Desktop

1. Open FME Workbench, Go to Tools -> FME Options --> Web Connections --> Manage Services...
2. Click on the "+" drop-down menu on the bottom left corner Select Create From --> "Esri ArcGIS Portal(template)"
3. This will load an empty template, give a Web Service Name of your choice(e.g. portal name)
4. Update the URLs with your portal name for Authorization Parameters, Retrieve Token Parameters, Refresh Token Parameters.
5. Add the Client Id and Client Secret value from the previous step and save the workspace.
6. In Reader, ensure that Portal URL matches the WebService URL, set the Authentication Type Web Service.
7. For ArcGIS Portal Connection, select the Service Name previously created and Click "Authenticate... ", Select Feature Service

Let me know if this helps connecting to your portal.

Hi @dan_mbc, knowing the correct authentication would use, but if you set up OAuth 2.0, FME does not care much about which authentication method is used. The authentication method is called "Web Service" from the drop-down list.

It is possible that there can be some firewall restrictions, but most organizations have the portal set up on-premises so the firewall should not have any interference(as it is local network), but feel free to confirm that with your team.

For setting up OAuth for ArcGIS Portal there are 2 essential parts (supported with 2019.2.3+)

• Set up an OAuth app for your ArcGIS portal

Log-in your portal in a web browser and click on Content.

1. Under My Content --> Click on Add Item
2. From the drop-down menu select "An Application"
3. Next Dialog, Select "Application", Enter Title and Tags
4. Click on "Add Item" to complete see below
5. Once the app is created it will appear in your contents list. Click on the App --> Settings --> App Registration --> Register Info
6. Note Client Id and Secret which will be required later.

• Configure a WebService using a template

Next step is to create a web service in FME Desktop

1. Open FME Workbench, Go to Tools -> FME Options --> Web Connections --> Manage Services...
2. Click on the "+" drop-down menu on the bottom left corner Select Create From --> "Esri ArcGIS Portal(template)"
3. This will load an empty template, give a Web Service Name of your choice(e.g. portal name)
4. Update the URLs with your portal name for Authorization Parameters, Retrieve Token Parameters, Refresh Token Parameters.
5. Add the Client Id and Client Secret value from the previous step and save the workspace.
6. In Reader, ensure that Portal URL matches the WebService URL, set the Authentication Type Web Service.
7. For ArcGIS Portal Connection, select the Service Name previously created and Click "Authenticate... ", Select Feature Service

Let me know if this helps connecting to your portal.

Hi @rahulsharma , thank you so much for the detailed response.

I had actually tried doing this previously (I briefly mentioned it in the first post), but this was reassuring to see and to check if I had did it right, but the end result seems to be the same.

When I try to connect after clicking 'authenticate' it says the site can't be reached:

However if I copy the URL and paste it in web browser, it does find the 'link'?

I can click approve and it gives me a OAuth2 Approval, along with a code. It says "Please copy this code, switch to your application and paste it there:"

Not sure where I am supposed to paste this though? and I get the feeling it should work in FME directly?

Thanks

Dan

Hi @dan_mbc

Can you confirm if there a proxy set up involved? If yes, do you have it set up in Tools --> FME Options -->Network --> Use System Proxy

If there is still an issue, I would recommend filing a support ticket with us and we can investigate this further https://www.safe.com/support/report-a-problem/

Hi @rahulsharma

I have just checked and we don't have any proxy setup. Would I need to have this setup? FME is on its own machine, so seperate from the ArcGIS Enterprise machine which hosts Portal/ArcGIS Server. Is it a case of adding a user account which has full admin control on the Enterprise server?

Thanks

Dan

Hi again,

So I don't know how or why, but this now seems to be connecting fine. I haven't tried it in a couple of days but I went back to it today and decided not to use the web connections method and instead just went into a new reader and selected ArcGIS Portal. I had tried this method before but it failed.

The settings I have used and worked are:

Portal URL = I used the format of the friendly URL rather than the server/domain name URL.

Authentication Type = NTLM

Entered my username and password as they appear in Portal and then clicked the elipses for feature services, and it loaded them up.

I am sure I tried this exact method previously, and to my knowledge nothing has changed with our ICT infrastructure, but either way, I am glad it is working.

@rahulsharma - Thanks for all your support with this, much appreciated.

Dan

Any update for this query..

Facing similar issue

Do I need to inform to admin user for verifying the setting of " members can only sign in to external apps that are approved " is enabled

followed all steps provided here no success

Hi @abnan0001​ perhaps you could create a new thread that references this thread, that way the rest of the community can respond to your question. Unfortunately, this thread is over 3 years old.

If this is an urgent matter for you then I would suggest creating a support case with us to have us investigate further.

Happy to help.