Skip to content

Commit 5013e34

Browse files
aloverroaloverro
committed
fix tab groups
1 parent 0fd9aac commit 5013e34

File tree

2 files changed

+220
-112
lines changed

2 files changed

+220
-112
lines changed

‎articles/planetary-computer/create-connection-arc-gis-pro.md

Lines changed: 220 additions & 112 deletions
Original file line numberDiff line numberDiff line change
@@ -104,6 +104,223 @@ By the end of this guide, you'll be able to securely browse and access Microsoft
104104
1. Select **Add a client application** and note the App ID.
105105

106106
[ ![Screenshot showing how to add a client app.](media/add-a-client-app.png) ](media/add-a-client-app.png#lightbox)
107+
## Register desktop client application for ArcGIS Pro
108+
109+
Register a second application (with a distinct name) to represent ArcGIS
110+
Pro Desktop and configure its API permissions --- ensuring it includes
111+
access to the web API exposed by the first application.
112+
113+
1. Create a second app registration for the ArcGIS Pro desktop client.
114+
115+
- Suggested name: ArcGISPro-GeoCatalog-DesktopClient or GeoCatalog-ArcGIS.
116+
117+
- Set account type: **Single tenant**.
118+
119+
[ ![Screenshot showing register second app arcgisprodesktopclient.](media/register-second-app-arcgis-pro-desktop-client.png) ](media/register-second-app-arcgis-pro-desktop-client.png#lightbox)
120+
121+
[ ![Screenshot showing new app registration GeoCatalog ArcGIS.](media/new-app-registration-geocatalog-arcgis.png) ](media/new-app-registration-geocatalog-arcgis.png#lightbox)
122+
123+
1. Configure the Desktop Client App.
124+
125+
Complete the following configuration within the new App registration GeoCatalog-ArcGIS.
126+
127+
- For **Authentication**, repeat the same steps as in Step 1:
128+
129+
- Add platform: **Web**.
130+
- Set **Redirect URI**: https://localhost.
131+
- Add platform: **Mobile and desktop applications**
132+
- Set **Redirect URI**: arcgis-pro://auth.
133+
- Enable **ID tokens** under **Implicit grant and hybrid flows**.
134+
- Select **Save**.
135+
136+
- **API Permissions**: Adding Access to the Web API App.
137+
138+
- In the **API permissions** tab, select **Add a permission**.
139+
140+
- Go to the **APIs my organization uses** tab and search for the **Web
141+
API app** created in Step 1 (for example, ArcGIS Pro).
142+
143+
- Select the app name to open the **Request API Permissions** screen.
144+
145+
[ ![Screenshot showing request API permissions.](media/request-api-permissions.png) ](media/request-api-permissions.png#lightbox)
146+
147+
- Select both user_authentication and user_impersonation; the delegated permissions defined in the first app.
148+
149+
- Select **Add permissions**.
150+
151+
[ ![Screenshot showing add API permissions ArcGIS Pro.](media/add-api-permissions-arcgis-pro.png) ](media/add-api-permissions-arcgis-pro.png#lightbox)
152+
153+
- Continue to add the following delegated permissions:
154+
155+
- **Azure Storage** > user_impersonation.
156+
- **Azure Orbital Spatio** > user_impersonation.
157+
- **Microsoft Graph** > User.Read (This permission is enabled by default).
158+
- Select **Add permissions**.
159+
- Select **Grant admin consent**.
160+
161+
[ ![Screenshot showing app selection on request API permissions screen.](media/app-selection-on-request-api-permissions-screen.png) ](media/app-selection-on-request-api-permissions-screen.png#lightbox)
162+
163+
[ ![Screenshot showing grant admin consents (4).](media/grant-admin-consents-4.png) ](media/grant-admin-consents-4.png#lightbox)
164+
## Configure ArcGIS Pro (Desktop) for Microsoft Planetary Computer Pro GeoCatalog access
165+
166+
This section outlines how to configure authentication and data access in the **ArcGIS Pro desktop application**, using OAuth 2.0 integration with **Microsoft Entra ID** and access to the **Microsoft Planetary Computer Pro GeoCatalog**. It includes steps to add an authentication connection and create storage and STAC data connections.
167+
## Add an authentication connection
168+
169+
1. Open the **ArcGIS Pro settings** page in one of the following ways:
170+
171+
- From an open project, select the **Project** tab on the ribbon.
172+
- From the start page, select the **Settings** tab.
173+
174+
1. In the side menu, select **Options**.
175+
176+
1. In the **Options** dialog box, under **Application**, select **Authentication**.
177+
178+
1. Select **Add Connection** to add a new authentication connection.
179+
180+
1. In the **Add Connection** dialog box:
181+
182+
- Enter a **Connection Name**.
183+
184+
- For **Type**, select **Microsoft Entra ID**.
185+
186+
- Enter your **Entra Domain** and **Client ID**.
187+
188+
- You can [find your **Entra Domain**](/partner-center/account-settings/find-ids-and-domain-names) (also know as your **Primary Domain**) from with Microsoft Entra ID from your Azure Portal
189+
190+
- Your **Client ID** is the client ID you set above in the **Add a client application** step.
191+
192+
- Add the following **scopes**:
193+
194+
- `https://storage.azure.com/.default`
195+
196+
- `https://geocatalog.spatio.azure.com/.default`
197+
198+
[ ![Screenshot showing how to add a connection.](media/add-connection.png) ](media/add-connection.png#lightbox)
199+
200+
- Select **OK**.
201+
202+
- Sign in through the Authentication dialog and complete the prompts.
203+
204+
[ ![Screenshot showing how to sign in with the Authentication dialog.](media/sign-in.png) ](media/sign-in.png#lightbox)
205+
206+
> [!TIP]
207+
> For more information, see the official ArcGIS Pro documentation [Connect to authentication providers from ArcGIS Pro](https://pro.arcgis.com/en/pro-app/latest/get-started/connect-to-authentication-providers-from-arcgis-pro.htm).
208+
209+
210+
## Prepare and record GeoCatalog information
211+
212+
1. Create an Microsoft Planetary Computer Pro GeoCatalog in your Azure subscription (for example,
213+
arcgisprogeocatalog), and locate it in the appropriate resource group.
214+
215+
[ ![Screenshot showing find hiddentype GeoCatalog.](media/find-hidden-type-geocatalog.png) ](media/find-hidden-type-geocatalog.png#lightbox)
216+
217+
1. Select on the GeoCatalog. For example, **arcgisprogeocatalog**.
218+
219+
1. Record the **GeoCatalog URI**. For example, ```https://arcgisprogeocatalog.<unique-identity>.<cloud-region>.geocatalog.spatio.azure.com```.
220+
221+
[ ![Screenshot showing how to retrieve the GeoCatalog URI.](media/get-geocatalog-uri.png) ](media/get-geocatalog-uri.png#lightbox)
222+
223+
1. Open the link to your GeoCatalog URI in the browser and select on the
224+
**Collections** button
225+
226+
[ ![Screenshot showing Microsoft Planetary Computer Pro web interface.](media/media-processing-center-pro-collections.png) ](media/media-processing-center-pro-collections.png#lightbox)
227+
228+
1. Record the **Collection Name**. For example, sentinel-2-l2a-tutorial-1000.
229+
230+
1. Construct the **Token API Endpoint** using this pattern: ```<GeoCatalog URI>/sas/token/<Collection Name>?api-version=2025-04-30-preview```
231+
232+
- Example:```https://arcgisprogeocatalog.<unique-identity>.<cloud-region>.geocatalog.spatio.azure.com/sas/token/sentinel-2-l2a-tutorial-1000?api-version=2025-04-30-preview```
233+
234+
1. Select the collection name.
235+
236+
[ ![Screenshot showing click on collection name.](media/click-on-collection-name.png) ](media/click-on-collection-name.png#lightbox)
237+
238+
1. Select the **Edit collection** button.
239+
240+
[ ![Screenshot showing how to edit a GeoCatalog collection.](media/edit-collection.png) ](media/edit-collection.png#lightbox)
241+
242+
1. In the resulting JSON display, locate the key "**title:assets:thumbnail:href**" and copy the corresponding value. For example:
243+
244+
```bash
245+
https://<unique-storage>.blob.core.windows.net/sentinel-2-l2a-tutorial-1000-<unique-id>/collection-assets/thumbnail/lulc.png
246+
```
247+
248+
1. Record the value of Account Name and Container Name:
249+
250+
- **Account Name**: ```<unique-storage>```
251+
- **Container Name**: ```sentinel-2-l2a-tutorial-1000-<unique-id>```
252+
253+
[ ![Screenshot showing collection json display.](media/collection-json-display.png) ](media/collection-json-display.png#lightbox)
254+
## Set up a connection to Azure Blob
255+
256+
1. In ArcGIS Pro, open the **Create Cloud Storage Connection File** geoprocessing tool to create a new ACS connection file. This tool can be accessed in the main Ribbon on the Analysis Tab. Select the Tools Button, then search for the tool by typing its name.
257+
258+
1. Specify a Connection File Location for the ACS file.
259+
260+
1. Provide a Connection File Name. For example, **geocatalog_connection.acs**.
261+
262+
1. For Service Provider select Azure.
263+
264+
1. For **Authentication**, select the name of the auth profile that you created in previous steps.
265+
266+
1. For **Access Key ID (Account Name)**, use the **Account Name** value that you recorded earlier: ```<unique-storage>```.
267+
268+
1. For **Bucket (Container) Name** use the **Container Name** value that you recorded earlier: ```sentinel-2-l2a-tutorial-1000-<unique-id>```.
269+
270+
1. Do not specify a **Folder**.
271+
272+
1. Add the provider option **ARC_TOKEN_SERVICE_API** and set the value to your **Token API Endpoint** that you constructed earlier. For example:
273+
274+
```bash
275+
https://arcgisprogeocatalog.<unique-identity>.<cloud-region>.geocatalog.spatio.azure.com/api/token/sentinel-2-l2a-tutorial-1000?api=version=2025-04-30-preview
276+
```
277+
278+
1. Add the provider option **ARC_TOKEN_OPTION_NAME** and set the value **to AZURE_STORAGE_SAS_TOKEN**.
279+
280+
[ ![Screenshot showing create cloud storage connection file sample.](media/create-cloud-storage-connection-file-sample.png) ](media/create-cloud-storage-connection-file-sample.png#lightbox)
281+
## Create a STAC connection to Microsoft Planetary Computer Pro
282+
283+
1. Create a new STAC connection in ArcGIS Pro (desktop).
284+
285+
> [!TIP]
286+
> Refer to ArcGIS Pro documentation to [Create a STAC connection](https://pro.arcgis.com/en/pro-app/latest/help/data/imagery/create-a-stac-connection.htm).
287+
288+
[ ![Screenshot showing create new stac connection.](media/create-new-stac-connection.png) ](media/create-new-stac-connection.png#lightbox)
289+
290+
- Provide a name for the STAC Connection: For example, GeoCatalog_Connection.
291+
292+
- For Connection use the form```<GeoCatalog URI>/stac```. For example,
293+
```bash
294+
https://arcgisprogeocatalog.<unique-identity>.<cloud-storage>.geocatalog.spatio.azure.com/stac
295+
```
296+
297+
- Reference the Authentication settings made in previous step.
298+
299+
- Add **Custom Paramaters**: Name: ```api-version```, Value: ```2025-04-30-preview```
300+
301+
- Add the ACS connection file that was created in previous step to the **Cloud Storage Connections** list.
302+
303+
- Select **OK**.
304+
305+
[ ![Screenshot showing how to create a STAC connection.](media/create-stac-connection.png) ](media/create-stac-connection.png#lightbox)
306+
307+
1. Explore the STAC connection.
308+
309+
> [!TIP]
310+
> Learn more about the ArcGIS [Explore STAC Pane](https://pro.arcgis.com/en/pro-app/latest/help/data/imagery/explore-stac.htm).
311+
312+
[ ![Screenshot showing the Explore STAC dialog box.](media/explore-stac.png) ](media/explore-stac.png#lightbox)
313+
314+
- Search, fetch extensive STAC metadata, and view the browse images.
315+
316+
- Add selected images to Map or Scene.
317+
318+
[ ![Screenshot showing explore the STAC data window.](media/explore-stac-data.png) ](media/explore-stac-data.png#lightbox)
319+
## Related content
320+
321+
- [Create cloud storage connection file](https://pro.arcgis.com/en/pro-app/latest/tool-reference/data-management/create-cloud-storage-connection-file.htm)
322+
- [Create a new GeoCatalog](./deploy-geocatalog-resource.md)
323+
- [Create a STAC collection](./create-stac-collection.md)
107324

108325
# [US Gov](#tab/usgov)
109326
## Register web API application for ArcGIS Pro
@@ -146,7 +363,7 @@ By the end of this guide, you'll be able to securely browse and access Microsoft
146363

147364
1. In the new **Mobile and desktop applications** panel, select *Add URI* to add a second Redirect URI: https://login.microsoftonline.us/common/oauth2/nativeclient
148365

149-
[ ![Screenshot showing the addition of a second Redirect URI.](media/government-mobile-second-redirect..png) ](media/government-mobile-second-redirect..png#lightbox)
366+
[ ![Screenshot showing the addition of a second Redirect URI.](media/government-mobile-second-redirect.png) ](media/government-mobile-second-redirect.png#lightbox)
150367

151368
1. Enable **ID tokens** under **Implicit grant and hybrid flows**.
152369

@@ -184,67 +401,6 @@ By the end of this guide, you'll be able to securely browse and access Microsoft
184401
1. Select **Add a client application** and note the App ID.
185402

186403
[ ![Screenshot showing how to add a client app.](media/add-a-client-app.png) ](media/add-a-client-app.png#lightbox)
187-
188-
# [Public](#tab/public)
189-
## Register desktop client application for ArcGIS Pro
190-
191-
Register a second application (with a distinct name) to represent ArcGIS
192-
Pro Desktop and configure its API permissions --- ensuring it includes
193-
access to the web API exposed by the first application.
194-
195-
1. Create a second app registration for the ArcGIS Pro desktop client.
196-
197-
- Suggested name: ArcGISPro-GeoCatalog-DesktopClient or GeoCatalog-ArcGIS.
198-
199-
- Set account type: **Single tenant**.
200-
201-
[ ![Screenshot showing register second app arcgisprodesktopclient.](media/register-second-app-arcgis-pro-desktop-client.png) ](media/register-second-app-arcgis-pro-desktop-client.png#lightbox)
202-
203-
[ ![Screenshot showing new app registration GeoCatalog ArcGIS.](media/new-app-registration-geocatalog-arcgis.png) ](media/new-app-registration-geocatalog-arcgis.png#lightbox)
204-
205-
1. Configure the Desktop Client App.
206-
207-
Complete the following configuration within the new App registration GeoCatalog-ArcGIS.
208-
209-
- For **Authentication**, repeat the same steps as in Step 1:
210-
211-
- Add platform: **Web**.
212-
- Set **Redirect URI**: https://localhost.
213-
- Add platform: **Mobile and desktop applications**
214-
- Set **Redirect URI**: arcgis-pro://auth.
215-
- Enable **ID tokens** under **Implicit grant and hybrid flows**.
216-
- Select **Save**.
217-
218-
- **API Permissions**: Adding Access to the Web API App.
219-
220-
- In the **API permissions** tab, select **Add a permission**.
221-
222-
- Go to the **APIs my organization uses** tab and search for the **Web
223-
API app** created in Step 1 (for example, ArcGIS Pro).
224-
225-
- Select the app name to open the **Request API Permissions** screen.
226-
227-
[ ![Screenshot showing request API permissions.](media/request-api-permissions.png) ](media/request-api-permissions.png#lightbox)
228-
229-
- Select both user_authentication and user_impersonation; the delegated permissions defined in the first app.
230-
231-
- Select **Add permissions**.
232-
233-
[ ![Screenshot showing add API permissions ArcGIS Pro.](media/add-api-permissions-arcgis-pro.png) ](media/add-api-permissions-arcgis-pro.png#lightbox)
234-
235-
- Continue to add the following delegated permissions:
236-
237-
- **Azure Storage** > user_impersonation.
238-
- **Azure Orbital Spatio** > user_impersonation.
239-
- **Microsoft Graph** > User.Read (This permission is enabled by default).
240-
- Select **Add permissions**.
241-
- Select **Grant admin consent**.
242-
243-
[ ![Screenshot showing app selection on request API permissions screen.](media/app-selection-on-request-api-permissions-screen.png) ](media/app-selection-on-request-api-permissions-screen.png#lightbox)
244-
245-
[ ![Screenshot showing grant admin consents (4).](media/grant-admin-consents-4.png) ](media/grant-admin-consents-4.png#lightbox)
246-
247-
# [US Gov](#tab/usgov)
248404
## Register desktop client application for ArcGIS Pro
249405

250406
Register a second application (with a distinct name) to represent ArcGIS
@@ -303,55 +459,9 @@ access to the web API exposed by the first application.
303459
[ ![Screenshot showing app selection on request API permissions screen.](media/app-selection-on-request-api-permissions-screen.png) ](media/app-selection-on-request-api-permissions-screen.png#lightbox)
304460

305461
[ ![Screenshot showing grant admin consents (4).](media/grant-admin-consents-4.png) ](media/grant-admin-consents-4.png#lightbox)
306-
307462
## Configure ArcGIS Pro (Desktop) for Microsoft Planetary Computer Pro GeoCatalog access
308463

309464
This section outlines how to configure authentication and data access in the **ArcGIS Pro desktop application**, using OAuth 2.0 integration with **Microsoft Entra ID** and access to the **Microsoft Planetary Computer Pro GeoCatalog**. It includes steps to add an authentication connection and create storage and STAC data connections.
310-
311-
# [Public](#tab/public)
312-
## Add an authentication connection
313-
314-
1. Open the **ArcGIS Pro settings** page in one of the following ways:
315-
316-
- From an open project, select the **Project** tab on the ribbon.
317-
- From the start page, select the **Settings** tab.
318-
319-
1. In the side menu, select **Options**.
320-
321-
1. In the **Options** dialog box, under **Application**, select **Authentication**.
322-
323-
1. Select **Add Connection** to add a new authentication connection.
324-
325-
1. In the **Add Connection** dialog box:
326-
327-
- Enter a **Connection Name**.
328-
329-
- For **Type**, select **Microsoft Entra ID**.
330-
331-
- Enter your **Entra Domain** and **Client ID**.
332-
333-
- You can [find your **Entra Domain**](/partner-center/account-settings/find-ids-and-domain-names) (also know as your **Primary Domain**) from with Microsoft Entra ID from your Azure Portal
334-
335-
- Your **Client ID** is the client ID you set above in the **Add a client application** step.
336-
337-
- Add the following **scopes**:
338-
339-
- `https://storage.azure.com/.default`
340-
341-
- `https://geocatalog.spatio.azure.com/.default`
342-
343-
[ ![Screenshot showing how to add a connection.](media/add-connection.png) ](media/add-connection.png#lightbox)
344-
345-
- Select **OK**.
346-
347-
- Sign in through the Authentication dialog and complete the prompts.
348-
349-
[ ![Screenshot showing how to sign in with the Authentication dialog.](media/sign-in.png) ](media/sign-in.png#lightbox)
350-
351-
> [!TIP]
352-
> For more information, see the official ArcGIS Pro documentation [Connect to authentication providers from ArcGIS Pro](https://pro.arcgis.com/en/pro-app/latest/get-started/connect-to-authentication-providers-from-arcgis-pro.htm).
353-
354-
# [US Gov](#tab/usgov)
355465
## Add an authentication connection
356466

357467
1. Open the **ArcGIS Pro settings** page in one of the following ways:
@@ -395,6 +505,8 @@ This section outlines how to configure authentication and data access in the **A
395505
> [!TIP]
396506
> For more information, see the official ArcGIS Pro documentation [Connect to authentication providers from ArcGIS Pro](https://pro.arcgis.com/en/pro-app/latest/get-started/connect-to-authentication-providers-from-arcgis-pro.htm).
397507

508+
509+
398510
## Prepare and record GeoCatalog information
399511

400512
1. Create an Microsoft Planetary Computer Pro GeoCatalog in your Azure subscription (for example,
@@ -439,7 +551,6 @@ This section outlines how to configure authentication and data access in the **A
439551
- **Container Name**: ```sentinel-2-l2a-tutorial-1000-<unique-id>```
440552

441553
[ ![Screenshot showing collection json display.](media/collection-json-display.png) ](media/collection-json-display.png#lightbox)
442-
443554
## Set up a connection to Azure Blob
444555

445556
1. In ArcGIS Pro, open the **Create Cloud Storage Connection File** geoprocessing tool to create a new ACS connection file. This tool can be accessed in the main Ribbon on the Analysis Tab. Select the Tools Button, then search for the tool by typing its name.
@@ -467,7 +578,6 @@ This section outlines how to configure authentication and data access in the **A
467578
1. Add the provider option **ARC_TOKEN_OPTION_NAME** and set the value **to AZURE_STORAGE_SAS_TOKEN**.
468579

469580
[ ![Screenshot showing create cloud storage connection file sample.](media/create-cloud-storage-connection-file-sample.png) ](media/create-cloud-storage-connection-file-sample.png#lightbox)
470-
471581
## Create a STAC connection to Microsoft Planetary Computer Pro
472582

473583
1. Create a new STAC connection in ArcGIS Pro (desktop).
@@ -506,8 +616,6 @@ This section outlines how to configure authentication and data access in the **A
506616
- Add selected images to Map or Scene.
507617

508618
[ ![Screenshot showing explore the STAC data window.](media/explore-stac-data.png) ](media/explore-stac-data.png#lightbox)
509-
510-
511619
## Related content
512620

513621
- [Create cloud storage connection file](https://pro.arcgis.com/en/pro-app/latest/tool-reference/data-management/create-cloud-storage-connection-file.htm)

‎articles/planetary-computer/media/government-mobile-second-redirect..png renamed to ‎articles/planetary-computer/media/government-mobile-second-redirect.png

File renamed without changes.

0 commit comments

Comments
 (0)