Authorization using Kerberos

Kerberos delegation enables finer control over end-user access to time-enabled feature layers. With this configuration, the Integrator relays the identity of the user requesting access to a layer to Portal for ArcGIS to authenticate and authorize access. It is recommended that you enable Kerberos delegation so that access to the data in time-enabled feature layers is restricted to the users with whom the ArcGIS items have been shared.

Follow these instructions to enable time-enabled feature layer authorization using Kerberos.

1. Configure Kerberos constrained delegation between PI Integrator for Esri ArcGIS and Portal for ArcGIS. See Kerberos constrained delegation.

2. Modify the PI Integrator for Esri ArcGIS configuration file to set the useiwamode parameter to 1. See useiwamode configuration parameter.

3. Share Portal for ArcGIS items with users that require access to the underlying time-enabled feature layers.