Authentication
In order to authenticate with Nearmap, you will need to register the widget with your Nearmap MyAccount at: https://apps.nearmap.com/account/integrations/widgets. The registration occurs via the widget setup wizard process once widgets have been provisioned in Nearmap MyAccount.
NOTE: Registration can only be commenced through the widget setup wizard.
NOTE: If you do not have access to Widgets, please contact your Nearmap Account Manager.
IMPORTANT: The authentication approach requires Nearmap systems to communicate with your ArcGIS Portal's sharing API to verify tokens. Only the Portal API endpoint needs to be reachable from Nearmap's IP addresses. The ArcGIS Experience Builder application hosting the widget doesn’t need to be public, but it must be accessible from Nearmap’s IP addresses.
Nearmap Sync Deployment Scenarios
Click on the diagrams to see a zoomed in version.
Public deployment
ArcGIS Portal is reachable via the internet; the REST API is resolvable and open.
Private deployment
ArcGIS Portal is within the corporate network. Only the REST API has to be exposed to specific Nearmap IP addresses.
Widget registration and validation workflow
Sharing requirements for application
The ArcGIS application hosting the Nearmap Sync widget must not be set to Sharing: Public, and must require Portal authentication before it can be accessed. Registration will fail with "The ArcGIS Hosting URL must not be public" if the application is public.
Configuration Requirements
ArcGIS Enterprise security settings (ArcGIS 11.3)
NOTE: Different versions can be selected in Other versions dropdown list. For more information about configuring security settings, refer to this article - Configure security settings on the Esri website.
- Log in to your ArcGIS Enterprise Portal. Confirm that you are signed in as a default administrator or as a member of a custom role with administrative privileges to manage security and infrastructure.
- In the Portal, click Organization and click the Settings tab.
- Click Security.
- In Access and permissions ensure HTTPS is Enabled.
- In Trusted Servers, add the following Nearmap IP addresses to the list of trusted servers:
• 54.160.92.119
• 3.219.245.127
• 52.71.223.124
NOTE: Ensure you add the Nearmap widget URL to the allowlist in ArcGIS Enterprise.
Handling network restrictions
If your ArcGIS Enterprise server is behind a firewall, within a Virtual Private Cloud (VPC), or has other network restrictions that might block communication with Nearmap, follow these additional steps to ensure connectivity:
- Ensure that your ArcGIS endpoint has a valid public DNS record so that when its hostname is queried from outside the organization's network, it resolves to an IP address reachable by Nearmap.
- Check that your firewall and ArcGIS endpoint allow requests from Nearmap's outgoing IP addresses:
- 54.160.92.119
- 3.219.245.127
- 52.71.223.124
Configuring the firewall
- Ensure that your firewall rules allow outbound and inbound HTTPS traffic to and from the Nearmap IP addresses listed above.
- If using an inbound firewall, allow incoming traffic from the Nearmap IP addresses listed above.
Configuring the VPC
- If your ArcGIS Enterprise is hosted within a VPC, configure the VPC security groups and network Access Control Lists (ACLs) to allow outbound and inbound traffic to
https://apps.nearmap.com and the Nearmap IP addresses listed above. - Ensure that any necessary Network Address Translation (NAT) gateways or proxies are correctly configured to handle traffic to and from Nearmap.
Configuring the proxy server
If your network uses a proxy server, configure the proxy settings to allow traffic to https://apps.nearmap.com and the Nearmap IP addresses listed above.
Update the proxy settings in your ArcGIS Server configuration if necessary.
Testing Connectivity
Use the curl command to test connectivity from your ArcGIS server to Nearmap. This can help ensure that the necessary network routes are open.
Example curl command:
curl -I --header "Origin: https://apps.nearmap.com" "https://<portal-host>/portal/sharing/rest?f=json
This will provide detailed information about the request and response, including headers and status codes.
Monitoring and Logging
- Check the ArcGIS Server logs for any errors or warnings related to connectivity issues.
- Monitor firewall and proxy logs to ensure that traffic is being correctly routed and not blocked.
Documentation
- Keep detailed documentation of all configurations made for future reference and troubleshooting.
- Note any specific IP addresses, ports, or domains that were configured.
Contact Support
If issues persist, contact Nearmap support for assistance in troubleshooting and ensuring that all necessary configurations are in place.