Consider the following scenario:
- The end user is running an in-house build Windows desktop client that uses the ArcgGIS WPF library for rendering ArcGIS maps.
- The end user is authenticated via Windows authentication.
- Now I want the client to acquire an access token for the REST services without prompting the end user for his/her username/password. That is, given that the end user is already logged in via Windows AD, the client should be able to acquire an access token with NTLM/Kerberos or what ever it is Windows authentication is using.
- The acquired token is then send to an in-house web service which will then access the ArcGIS REST services with the token and thus impersonating the end user without knowing either username or password (this web service is not part of the Windows domain).
Is that possible? How?
The server is "ArcGIS REST API for 10.1 SP1".
I am the client/server programmer - not the ArcGIS administrator :-)