While the most common deployment of Access Control includes an ArcGIS Web Adaptor, other deployments are also supported.
In a typical ArcGIS deployment that does not use a Web Adaptor, a reverse proxy directs traffic to the backend ports 6080/6443 of ArcGIS Server.
To configure a reverse proxy, without an ArcGIS Web Adaptor:
1.Install VertiGIS Studio Access Control on each ArcGIS Server machine, following the instructions provided on the Install Access Control page.
Typically, Access Control is installed on the backend ArcGIS Server machine. However, you can install it on a separate server if you prefer.
2.Run the Post Installer:
a.Follow the instructions provided on the Configure Post-Installation Settings page.
b.On the Components panel, follow the procedure for the Use the Access Control proxy without a Web Adaptor option.
3.Configure your reverse proxy to route traffic to Access Control on port 5080.
a.Route traffic to Access Control as a typical HTTP request.
An incoming request to https://<external-address>/arcgis should be routed to
http://<accesscontrol-server>:5080/https://<arcgis-server>:6443/arcgis/
This request does the following:
▪Targets Access Control at http://<accesscontrol-server>:5080.
▪Passes in the specified ArcGIS URL https://<arcgis-server>:6443/arcgis/ as the path portion of the URL.
4.To allow the backend ArcGIS Server to correctly provide absolute URLs in responses correctly:
a.The routed request must also add an X-Forwarded-Request-Context header with a value of the external address (https://<external-address>/arcgis).
You can omit this step if you configure your reverse proxy to rewrite URLs in responses.
5.To allow a reverse proxy to route traffic to Access Control, you must configure VertiGIS Studio Access Control to listen on an external host name. By default, Access Control listens for inbound requests on localhost only.
a.On the machine running Access Control, open a command prompt as an administrator.
b.Change the directory to C:\Program Files\VertiGIS\VertiGIS Studio Access Control\dist\bin
c.Run the command nssm edit geocortexaccesscontrol
A service editor application opens.
d.Locate the Environment tab (you may need to scroll to the right) and select it.
e.Add APP_HOST=<accesscontrol-server> to the list of environment variables.
Be sure to use your own host name.
f.To save your changes, click the Edit service button.
g.Open the Windows services.msc dialog and restart the VertiGIS Studio Access Control service.
