GEO Jobe Products | Data and Security FAQ

Regarding Authentication

Admin Tools Enterprise, BackupMyOrg, CleanMyOrg, and Scheduler all run as services on your own secure servers, so no outside traffic is needed. For Admin Tools Enterprise and Scheduler, all authentication is done directly from the ArcGIS organization, and operations are run from the administrator's browser. 

An index of items, users, and groups are stored as temporary caching data. App settings in the MongoDB database are hosted on your own server. BackupMyOrg and CleanMyOrg are also run from your own secure server, and the managed identities that access the ArcGIS organization are stored on the MongoDB installation on your own server. 

The client web interface is accessed via a port running a node server. Settings and cache information are stored in MongoDB. For customers that need extended security to meet STIG requirements, such as encryption at REST, MongoDB Enterprise can be purchased separately to use as a replacement for the standard MongoDB Community version.

Do GEO Jobe Products for ArcGIS store or access my username and password?

  • As per Esri’s best practices, GEO Jobe products for ArcGIS leverages OAuth 2.0 to generate a token which represents your session and is used to commit actions to the platform on your behalf. Additionally, our products support connections through Integrated Windows Authentication (IWA). Please note that GEO Jobe Products installed on-prem will provide an (opt-in) feature for the to store credentials on the database as an encypted string. This is only used for the automatic refresh of the login token.
  • GEO Jobe's products use OAuth 2.0 through Esri's REST API (already part of their existing Esri Enterprise environment), so the port is 80 if installed for HTTP and 443 if installed for HTTPS with SSL.

Does GEO Jobe have access to my account if I use their products?

  • GEO Jobe will not have access to your account. All associated code relating to our products for ArcGIS will be run on local browsers on your machine and executes requests directly to the platform through Esri’s REST API.

See Figure 1 for further details.

Does GEO Jobe have access to my data?

  • GEO Jobe will not have access to your data. All code related to our products run in your local browser on your machine and execute requests directly against the platform through Esri’s REST API.

See Figure 1 for further details.



Figure 1: Overview of how GEO Jobe Products function on your local machine