The various products that GEO Jobe builds to assist clients in managing their ArcGIS organizations are powerful tools that are capable of accessing, editing, copying, and even deleting all of an organization’s content. As such, a user must grant access to their credentials (or authenticate) before being able to retrieve information or allowing any actions to be performed through the use of GEO Jobe products.
There are two different methods for authentication when setting up an ArcGIS Organization - OAuth and IWA.
In OAuth (current version is OAuth 2.0), our products will redirect a user to a sign in prompt when authenticating access to ArcGIS account credentials. Here, the user’s username and password specific to the ArcGIS Organization must be provided. An access token is then granted to the user to access ArcGIS organization content (associated with the login credentials) through the use of GEO Jobe products. ArcGIS will NEVER provide important account details to GEO Jobe products, such as username settings or passwords.
(Note: If only SAML is used, that is a type of OAuth)
IWA (also known as Integrated Windows Authentication), is when the credentials are tied in with the account used to sign into a computer. While there may be a “sign in” button, a user is NEVER prompted to enter a username or password.
A simple way to determine if an ArcGIS Organization uses OAuth or IWA is to open up an incognito window in an internet browser, and then navigate to the ArcGIS Organization in question. If being prompted to enter a username and password when signing in, it is using OAuth. Otherwise, the authentication method is IWA.