Web GIS Deployment for Administrators. Vanessa Ramirez Solution Engineer, Natural Resources, Esri

Transcription

1 Web GIS Deployment for Administrators Vanessa Ramirez Solution Engineer, Natural Resources, Esri

2 Agenda Web GIS Concepts Web GIS Deployment Patterns Components of an On-Premises Web GIS Federation of Server with Portal Security Q&A

3 Web GIS Concepts

4 Web GIS Transformation of the ArcGIS Platform Desktop Apps Server GIS Web Maps Web Scenes Layers

5 Geoinformation Model Abstracts and Organizes Geospatial Data Apps Web Scenes Web Maps Portal Layers Geoinformation Model Real-Time Enterprise Data Imagery GIS Maps & Data Distributed Data

6 Web GIS How is it Different from Server GIS? Server GIS Silo d use of GIS services within custom applications Web GIS Pervasive use of web layers, scenes, and maps within all of the ArcGIS apps Users Users App n+1 Apps Services Web Maps Web Scenes Web Layers portal Services Data Data

7 Web GIS Components & Characteristics Solutions Deliver information products as apps (including all of the ArcGIS apps) to the right user at the right time APPS SDKs / APIs Location Enablement Data Management Analysis Users * Groups * Items * Tags (Content and Capabilities) Maps Layers Tools Files Field Mobility Patterns of Business Behavior Visualization (Operational Awareness) Constituent Engagement P O R T A L SDKs / APIs INFRASTRUCTURE SDKs / APIs Data Management Analysis Visualization Data and Storage EXTERNAL SYSTEMS AND SERVICES SDKs / APIs CRM Salesforce.com Microsoft Dynamics BI IBM Cognos SAP Business Objects Microstrategy Microsoft Office Excel PowerPoint Other Social Weather Traffic IOT Feeds

8 Web GIS Components & Characteristics Solutions Deliver information products as apps (including all of the ArcGIS apps) to the right user at the right time APPS SDKs / APIs Location Enablement Data Management Analysis Users * Groups * Items * Tags (Content and Capabilities) Maps Layers Tools Files Field Mobility Patterns of Business Behavior Visualization (Operational Awareness) Constituent Engagement Geoinformation model, content management, and sharing model P O R T A L SDKs / APIs INFRASTRUCTURE SDKs / APIs Data Management Analysis Visualization Data and Storage EXTERNAL SYSTEMS AND SERVICES SDKs / APIs CRM Salesforce.com Microsoft Dynamics BI IBM Cognos SAP Business Objects Microstrategy Microsoft Office Excel PowerPoint Other Social Weather Traffic IOT Feeds

9 Web GIS Components & Characteristics Solutions Deliver information products as apps (including all of the ArcGIS apps) to the right user at the right time APPS SDKs / APIs Location Enablement Data Management Analysis Users * Groups * Items * Tags (Content and Capabilities) Maps Layers Tools Files Field Mobility Patterns of Business Behavior Visualization (Operational Awareness) Constituent Engagement Geoinformation model, content management, and sharing model Integration with other systems and services P O R T A L SDKs / APIs INFRASTRUCTURE SDKs / APIs Data Management Analysis Visualization Data and Storage EXTERNAL SYSTEMS AND SERVICES SDKs / APIs CRM Salesforce.com Microsoft Dynamics BI IBM Cognos SAP Business Objects Microstrategy Microsoft Office Excel PowerPoint Other Social Weather Traffic IOT Feeds

10 Web GIS Deployment Patterns

11 Web GIS Deployment Patterns Overview SaaS & Public Cloud Hybrid On-premises

12 Deployment Patterns Drivers Limited IT resources IT mandate to be SaaS or cloud first New to GIS Online Want to enable Web GIS while managing content & capabilities on private infrastructure Use hosted services, content and capabilities as needed Must maintain control of compute environment Need full control over data and system security On-Premises

13 Deployment Patterns System Management SaaS & Public Cloud Hybrid On-premises Application Esri + Customer Esri/Customer Customer Network Esri Esri/Customer Customer Security Esri Esri/Customer Customer Infrastructure Cloud Service Provider Esri/Customer Customer

14 Deployment Patterns Users & Apps ArcGIS ArcGIS Intranet Intranet ArcGIS ArcGIS Internal Users External Users Can typically access internal & external web resources Can typically access only external web resources

15 Selecting the Right Pattern(s) Conceptual Level Considerations IT Maturity Low, Moderate, Advanced IT & CIO Focus Infrastructure, Integration, Innovation Cloud Policy / Preference Cloud First, Ok w/ Cloud, Cloud Averse Infrastructure Elasticity Easy, Moderately Easy, or Hard to Provision Infrastructure Data Sensitivity (security) Very Sensitive (e.g. HIPPA), Business Sensitive, Somewhat, Not Sensitive GIS Workflows (next 2-3 years) Web Mapping, Cartographic Mapping, 3D, Analysis, Real-time, Big Data Public / Constituent Engagement Heavy, Some, None Level of Collaboration / Sharing External and Internal, Internal Only, Limited, None Use of 3 rd Party Services Prefer, Ok, None Preference for COTS or Custom COTS, Custom, No Preference Comfort Outsourcing to Esri Very, Some, Limited, Note Service Level Agreement None, 95%, 99% + Disaster Recovery Strategy None, Future, Imminent

16 Components of an On-Premises Web GIS

17 Web GIS Anatomy of the Portal Desktop Web Device In the SaaS offering, ArcGIS Online, the portal is maintained by Esri in the cloud: portal For an on premise deployment using Portal for ArcGIS there are three main components that make up a Web GIS: Portal for ArcGIS Server Online Content and Services Hosting server (ArcGIS Server) ArcGIS Data Store

18 Web GIS Anatomy of the Portal System of Engagement On-premises Web GIS components System of Record Server GIS infrastructure Portal for ArcGIS Hosting server (ArcGIS Server) ArcGIS Data Store Server Connects to Data by reference Enterprise geodatabase Supports hosted data as well as the app and collaboration infrastructure; does not replace Server GIS infrastructure Supports publishing of authoritative data from enterprise geodatabases; can be used in conjunction with a Web GIS

19 Web GIS The Geoinformation Model Organization Group Item User Application Web Scene Web Map Web Layer Service Dataset

20 Web GIS The Role of Server for ArcGIS Geodata GeoServices Portal Service Web Layer Feature Class Service Web Layer Service Web Layer

21 Web GIS The Role of Server for ArcGIS Geodata GeoServices Portal Web Layer Feature Class Service Web Layer Web Layer

22 Web GIS The Role of Server for ArcGIS Geodata GeoServices Portal Active Wells Wells Wells Proposed Wells Wells by Status

23 Web GIS Referenced Architecture Publisher Standalone GIS Server Portal for ArcGIS Publish Manually linked URL portal Publish & register from Desktop Client portal

24 Demo Registering Portal Content in a Referenced Architecture

25 Web GIS Enterprise Data Store (SDE) Portal Publisher (ArcMap) Server (visualization) Server (analysis) GDB Administrator (ArcMap) Enterprise Geodatabases & Files

26 Web GIS Enterprise Data Store (SDE) System of Record - Authoritative Data Capabilities - Map Services - Image Services - Geoprocessing Services - Geocoders - Geodata Services GP Geocode Geodata Image Map But what about all the data that gets created through a system of engagement? How do we architect for that?

27 Federation of Server with Portal

28 Federation Referenced vs. Federated Referenced My Layer Federated My Layer Portal Portal 1 st Login 1 st Login 2 nd Login SSO My Service My Service

29 Federation What Happens on Federation? Server + Portal Share an Identity Store Portal items created for existing services (owned by federating admin) ALL new services get a portal item owned by portal user Access to Secure Server URLs through portal users ONLY Security goes from community based -> Ownership Based 1 st Login SSO Federated My Layer Portal My Service

30 Federation Advantages Create a fully integrated SSO across an on-premises Web GIS implementation (e.g. IWA) Leverage Portal s ownership based security model Publish content directly to your Portal - More on this later

31 Federation Architecture Publisher Federated GIS Server Publish Service is automatically added to the Portal portal Portal for ArcGIS

32 Demo Federated Portal & Server for ArcGIS

33 Server & Data Stores Enterprise Managed (SDE) vs. ArcGIS Managed Enterprise Managed Data Store (SDE) ArcGIS Managed Data Store Portal (Pro) Publisher (ArcMap or Pro) Portal Publisher (ArcMap) Server (visualization) Server (analysis) Server (hosting) GDB Administrator (ArcMap) ArcGIS Managed Geodatabases & Files ArcGIS Data Store

34 GIS Servers Hosting Servers Map Image GP Geocode Geodata Feature layers Tiled map layers 3D Scenes Enterprise Managed Data Store (SDE) ArcGIS Managed Data Store Portal Portal Publisher (ArcMap) Server (visualization) Server (analysis) Server (hosting) ArcGIS Managed GDB Administrator (ArcMap) Geodatabases & Files ArcGIS Data Store

35 Web GIS Why ArcGIS Data Store? Publish large number of hosted feature layers Publish hosted scene layers to Portal Archive high volume, real-time data Created backups of hosted content automatically Failover Capabilities Feature layers Tiled map layers 3D Scenes

36 Web GIS Why ArcGIS Data Store? Use Cases - Esri Maps for Office - Survey123 - Analysis Tools - Drag + Drop CSV - Upload Shapefile - Anything that mimics a hosted experience

37 Web GIS Key Takeaways Your architecture will impact end-user capabilities Always plan with the business cases in mind Tie your tehcnical GIS to business value for greatest success

38 Demo Providing an On-Premises Hosting Experience in Portal

39 Web GIS Anatomy of the Portal Desktop Web Device In the SaaS offering, ArcGIS Online, the portal is maintained by Esri in the cloud: portal For an on premise deployment using Portal for ArcGIS there are three main components that make up a Web GIS: Portal for ArcGIS Server Online Content and Services Hosting server (ArcGIS Server) ArcGIS Data Store

40 Security

41 Web GIS How is it Different from Server GIS? Server GIS Silo d use of GIS services within custom applications Web GIS Pervasive use of web layers, scenes, and maps within all of the ArcGIS apps Users Users App n+1 Apps Services Web Maps Web Scenes Web Layers portal Services Data Data

42 Security Identity Matters Named users - License software for use - Specify permissions - Enable ownership Benefits - Create & manage your own mapping content - Control sharing via groups - Setup and access your favorites from anywhere - Identify authoritative content contributors

43 Security Key Concepts Role Privilege Authentication Authorization (capabilities) Organization User Identity Authorization (content) Group Item

44 Security Information Model Named User - Own content or groups - Join groups Users Own or Join Groups Groups - Control access - Organize items Items Own Organize and Secure Index - Files: PDF, MPK, XLS, etc. - Links: Services & applications Tags Items Index Tags - Index content

45 Security User Hierarchy GIS portal Named Users User Publisher Administrator + +

46 Security Authentication Models Built-In Identity Store Integrated Window Authentication (IWA) SAML (Security Assertion Markup Language)

47 Security Built-In Identity Store Characteristics: Default / No Setup Quick & Easy Users are managed separately from AD When You Might Use It: Small Number of Users No need for AD Integration Users Portal for ArcGIS Groups

48 Security Integrated Windows Authentication Characteristics: Integrated with Active Directory ONLY in Portal for ArcGIS SSO Experience Supports Enterprise Groups No built-in access Portal for ArcGIS Window Users When You Might Use It: All Portal Users are Maintained within AD You want to leverage AD User and Groups You want a SSO Experience Do not want to double manage Groups Users

49 Security SAML What is SAML? SAML is a standard that allows for exchanging authentication and authorization data between parties Three Players in SAML - Service Provider (Portal for ArcGIS) - Identity Provider (e.g. AD FS) - User 1) Initial service request 3) IdP authentication 2) Redirect to IdP Identity Provider AD FS 4) Return SAML token User 5) SAML token allows access Service Provider Portal for ArcGIS ArcGIS Server

50 Security SAML When You Might Use It: ArcGIS Online - Only Enterprise/SSO Option Portal for ArcGIS - Allow built-in + Enterprise access - Allow access from multiple domains in an AD Forest Portal for ArcGIS Groups Users SAML (e.g., ADFS) Remote user store

51 Demo Single Sign-On with IWA vs. SAML

52 Summary Key Takeaways No such thing as a standalone Portal - It is a portion of your on-premises Web GIS Architect with your users in mind Server/Portal Federation unlocks additional functionality Pick the security model that fits your needs Desktop Web Device Portal Server Online Content and Services

53 Questions?

54 Thank you Please remember to fill out a survey