If you utilize Survey123 without a local Survey123 website installation on an ArcGIS Enterprise platform using Integrated Windows Authentication (IWA), you may have noticed that the IWA log-in process doesn’t always go smoothly. Installing a local deployment of the Survey123 website, with the proper configurations, will create a more predictable log-in experience with Survey123 through IWA.

Follow the steps below to configure the Survey123 website on a local (physical or vm) server with IWA. This configuration will also allow log-in with built-in Portal accounts. The Survey123 website must be installed on a machine with ArcGIS Portal already installed and configured.

Configuration Steps

1. Run Survey123 website installer (must be downloaded from My ESRI)
2. Make a backup/copy of the config.json file at this location: C:\Program Files\ArcGIS\Survey123website
3. Check Portal CORS on ArcGIS REST API. If no URLs are listed, you may continue with the installation.
4. Log in to Portal, go to Organization > Settings > Security > Allow origins.
5. In wwwroot folder (C:\inetpub\wwwroot), create folder called survey123.
6. In the survey123 folder, create a file called web.config and paste the contents below:

1<?xml version="1.0" encoding="UTF-8"?>2<configuration>3    <system.webServer>4        <rewrite>5            <rules>6                <clear />7                <rule name="ReverseProxyHTML" stopProcessing="false">8                    <match url="(^$|.*\.html$)" />9                    <conditions logicalGrouping="MatchAll" trackAllCaptures="false" />10                    <action type="Rewrite" url="http://localhost:5080/{R:1}" />11                    <serverVariables>12                        <set name="HTTP_X_ORIGINAL_ACCEPT_ENCODING" value="{HTTP_ACCEPT_ENCODING}" />13                        <set name="HTTP_ACCEPT_ENCODING" value="" />14                    </serverVariables>15                </rule>16                <rule name="ReverseProxyInboundRule1" stopProcessing="true">17                    <match url="(.*)" />18                    <conditions logicalGrouping="MatchAll" trackAllCaptures="false" />19                    <action type="Rewrite" url="http://localhost:5080/{R:1}" />20                </rule>21            </rules>22            <outboundRules>23                <rule name="update base tag" preCondition="isHTML">24                    <match filterByTags="Base" pattern="^/(.*)" />25                    <action type="Rewrite" value="/survey123/" />26                    <conditions trackAllCaptures="false">27                        <add input="{URL}" pattern="/" />28                    </conditions>29                </rule>30                <preConditions>31                    <preCondition name="isHTML">32                        <add input="{RESPONSE_CONTENT_TYPE}" pattern="^text/html" />33                    </preCondition>34                </preConditions>35            </outboundRules>36        </rewrite>37    </system.webServer>38</configuration>39

7. Convert survey123 folder to an application in IIS (right click folder)
8. Install URL rewrite module for IIS (download can be found here: https://www.iis.net/downloads/microsoft/url-rewrite)
9. In the URL rewrite actions pane, click View Server Variables. If variables below already exist, skip to step 9.
10. Click Add and add three variables
    • HTTP_ACCEPT_ENCODING
    • HTTP_X_ORIGINAL_ACCEPT_ENCODING
    • HTTP_X_ORIGINAL_HOST
11. Add rules to URL Rewrite module under actions (these should be inherited from web.config file)
    • Choose inbound blank rule
      

7. • Create a 2nd inbound blank rule
     

7. • Add blank outbound rule
     

7. • IIS rewrite should now have these rules
     

7. Install the IIS Application Request Routing module.
   • Also, ensure the IIS Application Request Routing module is installed on the web server. Once installed, enable proxy functionality as it is disabled by default:
   • Open IIS Manager on the web server,
   • Select your server from the tree view on the left.
   • Double-click Application Request Routing.
   • Select Server Proxy Settings from the Actions window on the right.
   • Check the Enable Proxy checkbox, and click Apply.
8. Perform Post-Installation for IWA
   • Portal URL: https://{yourportalurl}/portal
   • Enter administrator credentials
   • Leave JavaScript URLs as default
   • Leave ports as default
   • Select SSL cert type (pfx requires the known password)
   • Add desired survey123 URL: https://{yourportalurl1]/survey123
     

The post installation sets up everything listed above, but requires an ArcGIS Enterprise administrator to manually add the Survey123 website host URL, https://<survey123website.domain >:5443, as a redirectURI to Portal to allow sign-in. To do this:

7. Log in to the portal admin REST interface, for example:
8. https://portal_webadaptorhost.domain/portal_webadaptorname/portaladmin
9. Go to Security > OAuth > Get App Info, and enter the App ID survey123hub, and click Get App Info.
10. Copy the contents of the response.
11. Go back to OAuth and this time, go to Update App Info.
12. Paste the copied response into the input box, making sure to add the URL that you will use to access your Survey123 website to the list of redirectURIs, and click Update App.

This may well include the reverse proxy access point if you intend setting one up, for example: https://survey123website.domain/survey123

7. Repeat Step 2 to confirm that your additional redirectURI has been successfully added to the list.
8. Survey123 website can be reached at this link: https://{yourportalurl}/survey123/
9. Website configuration is finished!

‍