Geographic Information Systems Stack Exchange is a question and answer site for cartographers, geographers and GIS professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I need to provide Google Earth users access to my REST endpoints. Currently there is a database that has the users and pwds as well as there roles. Roles determine what data in the website they can see and could be used to tell me which endpoints they have access to. I'm currently using Windows security for authentication, but this means I have to make changes to my users when ever changes in the database occur. I want to use that database for authenticating the endpoints. Google Earth only supports Basic Auth.

I've gotten as far as extending IIS to invoke Basic authentication but authenticate against a sql database, however, I don't know how to apply what I have now to securing the endpoints.

share|improve this question

When securing ArcGIS Server, you can either use IIS authentication, or database authentication (you would want DB).

Alternately, disable anonymous access to your REST endpoint and expose a proxy page which accepts username/password. Then use your proxy page to authenticate against the information found in the database, and from there make a request to the REST end point with a pre-set windows authentication information. For added security, you can do IP filtering to only allow internal access to your REST endpoint (the proxy page will still be able to access your REST endpoint).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.