Security best practices

OSIsoft generally recommends a token-based approach for authentication. For PI Integrator for Esri ArcGIS, it is recommended that you set the useiwamode configuration parameter as follows:

useiwamode = 0

In the case that your Portal for ArcGIS has been configured to use Integrated Windows Authentication and tokens are not supported, OSIsoft recommends setting the useiwamode configuration parameter as follows:

useiwamode = 1

It is also recommended that you include your Integrator server as a trusted server in the Portal for ArcGIS security settings.

1. Sign into Portal for ArcGIS as an administrator of your organization.

2. Click My Organization at the top of the site and click Edit Settings.

3. Click Security on the left side of the page.

4. Add the Integrator server to the list of Trusted Servers using the following format:

   https://fully-qualified-domain-name:port

5. Click Save to save your changes.

If you do not specify the Integrator server as a trusted server, communication between browser clients and the Integrator will use legacy JSONP communication. By specifying a trusted server, communication is performed using the more modern and secure CORS specification instead of JSONP. Specifically, specifying a trusted server enables communication with the Integrator as a CORS trusted origin. For more details, see the OWASP security site here: HTML5 Security Cheat Sheet.