Certificate authentication with PKI

View in

UWP

WPF

WinUI

View on GitHub

Access secured portals using a certificate.

Image of certificate authentication with PKI

Use case

PKI (Public Key Infrastructure) is a certificate authentication method to secure resources without requiring users to remember passwords. Government agencies commonly issue smart cards using PKI to access computer systems.

How to use the sample

NOTE: You must provide your own ArcGIS Portal with PKI authentication configured.

Provide a URL to a PKI-enabled server, then use the certificate selection UI to select an appropriate certificate for that server.

How it works

Create the X.509 certificate store, referring to the user's certificates.
Open the certificate store in read-only mode.
Find all certificates that are currently valid.
Display the Windows certificate selection UI to choose from the returned certificates.
Create the ArcGIS Runtime credential with the chosen certificate.
Create the Portal, explicitly passing in the credential that was created.

Relevant API

CertificateCredential

Additional information

ArcGIS Enterprise requires special configuration to enable support for PKI. See Using Windows Active Directory and PKI to secure access to your portal and Use LDAP and PKI to secure access to your portal in Portal for ArcGIS.

Sample Code

CertificateAuthenticationWithPKI.xaml

CertificateAuthenticationWithPKI.xaml.cs

Use dark colors for code blocksCopy
﻿<UserControl x:Class="ArcGISRuntime.WinUI.Samples.CertificateAuthenticationWithPKI.CertificateAuthenticationWithPKI"
             xmlns="http://schemas.microsoft.com/winfx/2006/xaml/presentation"
             xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml"
             xmlns:x509certificates="using:System.Security.Cryptography.X509Certificates">
    <UserControl.Resources>
        <DataTemplate x:Key="CertificateTemplate" x:DataType="x509certificates:X509Certificate2">
            <Grid>
                <Grid.ColumnDefinitions>
                    <ColumnDefinition Width="Auto" />
                    <ColumnDefinition Width="*" />
                </Grid.ColumnDefinitions>
                <Grid.RowDefinitions>
                    <RowDefinition Height="Auto" />
                    <RowDefinition Height="Auto" />
                    <RowDefinition Height="Auto" />
                </Grid.RowDefinitions>
                <TextBlock Grid.Row="0"
                           Grid.Column="0"
                           Text="User:" />
                <TextBlock Grid.Row="1"
                           Grid.Column="0"
                           Text="Issuer:" />
                <TextBlock Grid.Row="2"
                           Grid.Column="0"
                           Text="Valid until:" />
                <TextBlock Grid.Row="0"
                           Grid.Column="1"
                           Text="{Binding Subject}" />
                <TextBlock Grid.Row="1"
                           Grid.Column="1"
                           Text="{Binding Issuer}" />
                <TextBlock Grid.Row="2"
                           Grid.Column="1"
                           Text="{Binding NotAfter}" />
            </Grid>
        </DataTemplate>
    </UserControl.Resources>
    <Grid>
        <Grid HorizontalAlignment="Center" VerticalAlignment="Center">
            <Grid.RowDefinitions>
                <RowDefinition Height="Auto" />
                <RowDefinition Height="Auto" />
                <RowDefinition Height="Auto" />
                <RowDefinition Height="Auto" />
            </Grid.RowDefinitions>
            <Grid.ColumnDefinitions>
                <ColumnDefinition Width="Auto" />
                <ColumnDefinition Width="150" />
            </Grid.ColumnDefinitions>
            <TextBlock Grid.Row="0"
                       Grid.Column="0"
                       Grid.ColumnSpan="2"
                       Text="Enter the URL to a portal that you have a certificate for:" />
            <TextBox x:Name="PortalUrlTextbox"
                     Grid.Row="1"
                     Grid.Column="0"
                     Grid.ColumnSpan="2"
                     MinWidth="300"
                     Margin="0,10"
                     PlaceholderText="https://portal.yourcompany.com/gis/" />
            <Button Grid.Row="2"
                    Grid.Column="0"
                    Grid.ColumnSpan="2"
                    HorizontalAlignment="Stretch"
                    Click="Button_Click"
                    Content="Choose a certificate" />
            <TextBlock Grid.Row="3"
                       Grid.Column="0"
                       Margin="5"
                       Text="User: " />
            <TextBlock x:Name="LoggedInUsername"
                       Grid.Row="3"
                       Grid.Column="1"
                       Margin="5"
                       Text="Not logged in" />
        </Grid>
    </Grid>
</UserControl>