Printing maps that contain secured services

The way you print maps that contain secured services is dependent on how ArcGIS Server is configured to authenticate users. There are two types; GIS server tier authentication (commonly referred to as ArcGIS Server authentication) and web tier authentication. To learn more about these authentication types, see Configuring ArcGIS Server security.

Once you've determined how users are authenticated, see the sections below for guidance on how to print maps that contain secured services.

• GIS server tier authentication
• Web tier authentication

GIS server tier authentication

If you use short-term tokens (the default) to access your secured services, the user will be challenged to provide the name and password upon opening the web application. The token is then passed to the PrintingTools service when the user requests a map to be printed. There is no need to create a custom print service if you are using short-term tokens.

If you embedded a long-term token in the code of your web application, the authentication information being passed to the PrintingTools service will be invalid. In this scenario, you'll need to publish your own service for printing using the steps below. When preparing this service, you'll provide credentials that it can use when requesting maps from secured services.

Steps:

1. In the Catalog window of ArcMap, expand Toolboxes > MyToolboxes.
2. Right-click My Toolboxes and click New > Toolbox.
3. Give your toolbox a name, such as SecurePrinting.tbx.
4. In the Catalog tree, expand Toolboxes > System Toolboxes > Server Tools.tbx > Printing.
5. Right-click the Export Web Map tool and click Copy.
6. Right-click your toolbox that you created in Step 2 and click Paste.
7. Right-click the pasted Export Web Map tool from your own toolbox and click Edit.
8. Click the plus (+) button and browse to the GIS server connection containing the secured services you will print.

   The connection needs to have the name and password saved within it. It should be a user connection, not a publisher or administrative connection.

   If you don't see any connections available, you need to go back to the Catalog tree and make one using the instructions in Making a user connection to ArcGIS Server in ArcGIS for Desktop.

   You can add connections to as many servers as you need to support your printing service. Click OK when you've finished adding connections.

9. Publish the Export Web Map tool from your own toolbox as a geoprocessing service using the steps in Tutorial: Publishing additional services for printing. In Step 2 of the tutorial, open your own Export Web Map tool you pasted during the steps above. Do not open the original Export Web Map tool from the Server Tools toolbox.
   Caution:

   Once you publish your own service for printing, it's recommended that you apply ArcGIS Server security rules to restrict who can access the service. This prevents anonymous users from generating printable map images that display your secured services. See Restricting access to GIS web services to learn more about setting up security.

Web tier authentication

Credentials stored within a custom print service cannot be used to print secured services using web tier authentication. If you enforce security at the web server tier (for example, by using the ArcGIS Web Adaptor), you'll need to configure the ArcGIS Server account as a domain account and grant it access to the secured services. This can be accomplished by configuring the domain account as a member of a user role that has explicit access to each secured service. You can also configure the account as a member of a publisher role that has read access to all services.

To learn more, see The ArcGIS Server account.