- URL:
- https://<root>/security/config
- Methods:
- GET
- Version Introduced:
- 10.9
Description
This resource returns the currently active security configuration for your ArcGIS Enterprise on Kubernetes deployment.
Request parameters
| Parameter | Details | 
|---|---|
| 
 | The response format. The default format is  Values:  | 
Security configuration properties
| Parameter | Details | 
|---|---|
| 
 | The role assigned to the federated server. | 
| 
 | Connection information about the currently active user store. | 
| 
 | Connection information about the currently active role store. | 
| 
 | The key used to encrypt tokens. | 
| 
 | A Boolean that indicates whether new organization accounts will automatically be created when enterprise users access your Enterprise portal for the first time ( Values:  | 
| 
 | A Boolean that indicates whether security is enabled for any GIS service. The default value is  Values:  | 
| 
 | A Boolean that indicates whether access to the services directory will be disabled. The default value is  Values:  | 
| 
 | This property restricts what hosts Enterprise portal can access directly. This restriction applies to several scenarios, including when the Enterprise portal accesses resources from a server that does not support Cross-Origin Resource Sharing (CORS) or when saving credentials used to access a secure service. By default, this property is not defined and no restrictions are applied. Use the format (.*).domain.com to allow access to all machines within a specified domain. | 
| 
 | Introduced at 10.9.1. A Boolean that controls the value of the Access-Control-Allow-Private-Network response header in a CORS preflight request to a portal service URL. This property was added to support the Private Network Access web specification (CORS-RFC1918) that aims to protect sites accessed over a private network from being able to make internal CORS requests. The default value is  Values:  | 
Portal properties
| Parameter | Details | 
|---|---|
| 
 | A key automatically generated during site creation. This property should not be modified. | 
| 
 | The key obtained after federating an ArcGIS Server to an organization. | 
| 
 | The internal service URL used to access the Portal sharing container. | 
| 
 | The organization URL. | 
| 
 | The external URL of the server federated with the organization. | 
| 
 | Must be set as  | 
| 
 | The ID of the server that is federated with the organization. | 
Forward proxy config
| Parameter | Details | 
|---|---|
| 
 | The forward proxy host name for http requests. | 
| 
 | The forward proxy host name for https requests. | 
| 
 | The forward proxy port number for http requests. | 
| 
 | The forward proxy port number for https requests. | 
| 
 | The forward proxy user name for http requests when authentication is required. | 
| 
 | The forward proxy user name for https requests when authentication is required. | 
| 
 | The forward proxy password for http requests when authentication is required. | 
| 
 | The forward proxy password for https requests when authentication is required. | 
| 
 | A list of host names separated by  | 
| 
 | A Boolean that indicates whether the http proxy password is encrypted. When adding or updating the password, this property should be changed to  Values:  | 
| 
 | A Boolean that indicates whether the https proxy password is encrypted. When adding or updating the password, this should be changed to  Values:  | 
Example usage
The following is a sample request URL used to access the config  resource:
https://organization.domain.com/context/admin/security/config?f=pjsonJSON Response example
{
  "serverRole": "HOSTING_SERVER",
  "userStoreConfig": {
    "type": "PORTAL",
    "properties": {}
  },
  "roleStoreConfig": {
    "type": "PORTAL",
    "properties": {}
  },
  "tokenServiceKey": "AIT8Nvh7J7AHWAld1RZe9/n393gLeAeq4HvTkaN5SoM=",
  "enableAutomaticAccountCreation": false,
  "allowInternetCORSAccess": true,
  "securityEnabled": true,
  "disableServicesDirectory": false,
  "portalProperties": {
    "webgisServerTrustKey": "PluSR7m7CyWo3JfOZrL2qkRAy4tvO+VNzEgKfK5gWS4=",
    "portalSecretKey": "73ccba361df243ddbfd8b697e148dc4a",
    "privatePortalUrl": "https://privateportal.domain.local:8443/arcgis/",
    "portalUrl": "https://reverseproxy.domain.com/arcgis/",
    "serverUrl": "https://reverseproxy.domain.com/gis/",
    "includeOrgIdWIthUsername": false,
    "portalMode": "ARCGIS_PORTAL_FEDERATION",
    "serverId": "T4QEbIXt66r0p5bW"
  },
  "forwardProxyConfig": {
    "httpProxyHost": "proxy.example.com",
    "httpsProxyHost": "proxy.example.com",
    "httpProxyPort": 8888,
    "httpsProxyPort": 8888,
    "httpProxyUser": "username",
    "httpProxyPassword": "password",
    "httpsProxyUser": "username",
    "httpsProxyPassword": "password",
    "nonProxyHosts": "enterprise.example.com|server.example.com",
    "isHttpProxyPasswordEncrypted": false,
    "isHttpsProxyPasswordEncrypted": false
  }
}