Contents
How to access ArcGIS token-secured web services?
When ArcGIS Server services are secured using ArcGIS token-based authentication, the client software must be able to obtain and use the token. Esri client applications, such as ArcGIS Desktop and ArcGIS Pro, automatically handle the process of acquiring tokens from the token service and presenting tokens to the secured ArcGIS web service.
Where can I get a long lived ArcGIS token?
Instead, a long-lived token can be obtained from the token server, and this token can be included in the client-side page. The token is then included in the request for the service. For details on acquiring the token, see Acquiring ArcGIS tokens.
How to access the ArcGIS API in JavaScript?
ArcGIS API for JavaScript: The client must be capable of providing a token to access the service that requires a token. In most cases, it will not be appropriate to embed the user name and password for the service into the client-side JavaScript.
Which is the portal for the ArcGIS REST API?
Think of the ArcGIS Portal Directory as a list of Portal for ArcGIS resources exposed through the REST API. You can navigate the links in the ArcGIS Portal Directory to learn which URLs and parameters to use in your administrative web service requests.
What kind of header is used for ArcGIS Server?
If ArcGIS Server uses ArcGIS Server authentication and not web-tier authentication (IWA, HTTP BASIC, PKI, and so on), the standard HTTP Authorization header may be used instead of the X-Esri-Authorization header:
How to generate portal token in ArcGIS REST API?
Portal token generated in exchange for user credentials for use by clients working with a federated server. Example: token= . This parameter is required only when generating a server-token. Username, password, client, referrer, and expiration parameters are not required for generating a server-token.
How are secure resources handled in ArcGIS Server?
For example, a web application that accesses a secure service can be configured to prompt a user for their username and password credentials. The end user needs to have permissions set with the platform so that their credentials can unlock the service. Managing users and their roles can be handled various ways in ArcGIS Server.
How to connect to ArcGIS Server web service?
Verify that you are signed in and have privileges to create items. Open the My Content tab of the content page and click Add Item. The Add Item window appears. Choose ArcGIS Server web service for the item type. Type the REST URL of the secure service in the URL field.
When to use user login in ArcGIS Server?
One scenario where you might use the user login approach is when building an application that access an ArcGIS Server service secured with token-based authentication. If an application tries to access a secure service, a valid token is required to unlock the service.
Can you use ArcGIS for Integrated Windows Authentication?
To use Integrated Windows Authentication, you must use ArcGIS Web Adaptor (IIS) deployed to Microsoft’s IIS web server. You cannot use ArcGIS Web Adaptor (Java Platform) to perform Integrated Windows Authentication. If you haven’t done so already, install and configure ArcGIS Web Adaptor (IIS) with your portal.
When does an ArcGIS token have an expiration time?
ArcGIS Server verifies the supplied credentials and issues a token. The user presents this token whenever accessing a secured resource. To maintain the security of the token, each token is associated with an expiration time. The end user may see a time-out or other error message if an expired token is used.
What are the parameters of an ArcGIS token?
Two parameters define the life-span of issued tokens: Lifespan of Short-lived Tokens: When a client requests a token but does not specify a time-out value, a short-lived token is issued. The issued token is only valid for the duration defined by this property.