Enable token acquisition through an HTTP GET request—ArcGIS Server (2024)

When using ArcGIS Server token-based authentication, acquiring an ArcGIS token is only allowed through an HTTP POST request. Acquiring a token through an HTTP GET request (or HTTP POST request with credentials in the query parameter) is possible, but disabled by default. If your organization uses applications that rely on acquiring a token in this manner, follow the steps below to enable token acquisition through an HTTP GET request.

Caution:

Although using a GET request is a convenient method of acquiring a token, a user's credentials are provided as part of the URL and may be stored in browser history or in network components. It's recommended that you update your applications so that tokens are not acquired through a GET request.

  1. Log in to the ArcGIS Server Administrator Directory. The URL is formatted http://gisserver.domain.com:6080/arcgis/admin.
  2. Click security > tokens > update.
  3. In the Token Manager Configuration dialog box, update the following properties. If necessary, add the properties manually.
    • To acquire a token through an HTTP GET request, set the allowHttpGet property to true.
    • To acquire a token through an HTTP POST request with credentials in the query parameter, set the allowHttpPostQueryParams property to true.

    For example:

    { "type": "BUILTIN", "properties": { "allowHttpGet": "true", "allowHttpPostQueryParams": "true", "longTimeout": "1440", "sharedKey": "VYHyatfGUlFWHgnAVMEc40nL1rn7s+l190vtgMjCx3c=", "shortTimeout": "60" }}

  4. Click Update.

Feedback on this topic?

Enable token acquisition  through an HTTP GET request—ArcGIS Server (2024)

FAQs

Enable token acquisition through an HTTP GET request—ArcGIS Server? ›

Log in to the ArcGIS Server Administrator Directory at http://gisserver.domain.com:6080/arcgis/admin. Browse to security > config > update. For the Protocol parameter, choose the HTTP and HTTPS option and click Update. This automatically restarts your ArcGIS Server site.

How do I enable HTTP on ArcGIS Server? ›

Log in to the ArcGIS Server Administrator Directory at http://gisserver.domain.com:6080/arcgis/admin. Browse to security > config > update. For the Protocol parameter, choose the HTTP and HTTPS option and click Update. This automatically restarts your ArcGIS Server site.

How do I get my ArcGIS access token? ›

Open the URL http://gisserver.domain.com:6080/arcgis/tokens in a web browser.
  1. Enter the following information: User name: The name of a user authorized to access the resource. Password: The user's password. Client: This parameter enforces restrictions on how the token may be used. ...
  2. Click Generate Token to get the token.

What permissions do I need to grant to the ArcGIS Server account? ›

Permissions to grant to the ArcGIS Server account

The ArcGIS Server account requires no special permissions on the operating system other than file access to the data, configuration store, and server directories. The ArcGIS Server account does not need to be an administrator on the machine.

What is the expiration time for ArcGIS portal token? ›

If an expiration time isn't specified, each kind of token has a default expiration value: ArcGIS token: 120 minutes. OAuth access token, when created with the Implicit or Client Credentials grant types: 120 minutes. OAuth access token, when created with the Authorization Code grant type: 30 minutes.

How do I enable HTTP activation? ›

Activate Windows Communication Foundation (WCF)
  1. From the Start menu, select Administrative Tools > Server Manager.
  2. Select Add roles and features from the Dashboard.
  3. Select Next twice.
  4. Select Features.
  5. In the Features area, expand the: - . ...
  6. Under WCF Services select: - HTTP Activation.

How to connect to server using HTTP? ›

Select the protocol to use ( http:// or https:// ). Use the Server field to enter the name or IP address of the HTTP server. Do not include the scheme (i.e. http:// ) in this field. If your server is listening on a non-standard port (80 for http:// and 443 for https:// ) then enter the port number into the Port field.

How do I send an access token request? ›

Sending an access token in a request

When you put a VerifyAccessToken policy at the front of your API proxy flow, apps must present a verifiable access token (also called a "bearer token") to consume your API. To do this, the app sends the access token in the request as an "Authorization" HTTP header.

How can I get access token authorization code? ›

The following section describes the steps for obtaining the access token and refresh token using the authorization code grant mechanism:
  1. Step 1: Authenticate a User and Create a User Session.
  2. Step 2: [Optional] Generating Client Credentials.
  3. Step 3: Generate Authorization Code.
  4. Step 4: Exchange Auth Code for a Token.

How do I get access tokens? ›

Get Access Tokens
  1. To request an access token , make a POST call to the token URL.
  2. When a user authenticates, you request an access token and include the target audience and scope of access in your request. ...
  3. In only one specific instance, access tokens can have multiple target audiences.

What is the authorization code for ArcGIS? ›

In the ArcGIS Administrator, click the Desktop folder, select the appropriate Single Use product, and click Authorize Now. Select I have received an authorization file from Esri and browse to the (*. respc) file. Click Next so the applications will be authorized and ready for use.

How do I enable Esri access in ArcGIS? ›

At the top of the site, click Organization and click the Members tab. Search for members by name or username and apply filters to narrow the members list. Sort the list as desired, such as by name or last login date. for the member for whom you want to enable access, click Enable Esri Access, and click OK.

How do I authorize ArcGIS? ›

A valid authorization file is required for ArcGIS Server. To reconfigure your machine with an updated authorization file, run through the Software Authorization wizard again. To open the Software Authorization wizard at a later time, click Start > Program Files > ArcGIS > Software Authorization.

How do I fix an expired access token? ›

Once expired, you need to re-authenticate to obtain a new token. Doing this prevents the same token from being used for an extended period of time, thereby reducing the risk of misappropriation. You can also use refresh tokens to renew new access tokens.

How do I get ArcGIS token? ›

Open the URL https://gisserver.domain.com:6443/arcgis/tokens in a web browser.
  1. Enter the following information: User name—The name of a user authorized to access the resource. Password—The user's password. Client—This parameter enforces restrictions on how the token may be used. ...
  2. Click Generate Token to get the token.

What happens when access token expires? ›

In this article. When a token has expired or has been revoked, it can no longer be used to authenticate Git and API requests. It is not possible to restore an expired or revoked token, you or the application will need to create a new token.

How do I enable HTTP ports? ›

Enable or Disable HTTP/HTTPS Ports
  1. Log on to Universal CMDB.
  2. Select Administration > Infrastructure Settings.
  3. Enter either http or https in the Filter (by Name) box to display the HTTP settings. Enable HTTP(S) connections. True: the port is enabled. ...
  4. Restart the server to apply the change. Caution.

How to enable HTTPS on server? ›

How to properly enable HTTPS on your server
  1. Buy an SSL certificate.
  2. Request the SSL certificate.
  3. Install the certificate.
  4. Update your site to enable HTTPS.

Top Articles
12 Highest-Paying Adsense Alternatives in 2024
Ultimate Guide to NodeJS Performance feat. Clustering, PM2, Worker Threads
Kansas City Kansas Public Schools Educational Audiology Externship in Kansas City, KS for KCK public Schools
Ofw Pinoy Channel Su
Soap2Day Autoplay
Wild Smile Stapleton
Unlocking the Enigmatic Tonicamille: A Journey from Small Town to Social Media Stardom
Cinepacks.store
William Spencer Funeral Home Portland Indiana
Nichole Monskey
Ukraine-Russia war: Latest updates
Ladyva Is She Married
How to watch free movies online
Slushy Beer Strain
The fabulous trio of the Miller sisters
Finger Lakes Ny Craigslist
Rachel Griffin Bikini
Inside the life of 17-year-old Charli D'Amelio, the most popular TikTok star in the world who now has her own TV show and clothing line
Red Devil 9664D Snowblower Manual
Craigslist Missoula Atv
Kamzz Llc
BMW K1600GT (2017-on) Review | Speed, Specs & Prices
Team C Lakewood
Cincinnati Adult Search
Babbychula
Aol News Weather Entertainment Local Lifestyle
Idle Skilling Ascension
Dtm Urban Dictionary
27 Fantastic Things to do in Lynchburg, Virginia - Happy To Be Virginia
Log in or sign up to view
The Mad Merchant Wow
Metro By T Mobile Sign In
Montrose Colorado Sheriff's Department
School Tool / School Tool Parent Portal
Midsouthshooters Supply
Crazy Balls 3D Racing . Online Games . BrightestGames.com
Has any non-Muslim here who read the Quran and unironically ENJOYED it?
Jason Brewer Leaving Fox 25
Trap Candy Strain Leafly
Let's co-sleep on it: How I became the mom I swore I'd never be
Lake Kingdom Moon 31
Mcalister's Deli Warrington Reviews
Pain Out Maxx Kratom
Leland Nc Craigslist
Flappy Bird Cool Math Games
Cch Staffnet
Phone Store On 91St Brown Deer
Server Jobs Near
The top 10 takeaways from the Harris-Trump presidential debate
Cvs Minute Clinic Women's Services
Where To Find Mega Ring In Pokemon Radical Red
Latest Posts
Article information

Author: Nathanael Baumbach

Last Updated:

Views: 6161

Rating: 4.4 / 5 (75 voted)

Reviews: 82% of readers found this page helpful

Author information

Name: Nathanael Baumbach

Birthday: 1998-12-02

Address: Apt. 829 751 Glover View, West Orlando, IN 22436

Phone: +901025288581

Job: Internal IT Coordinator

Hobby: Gunsmithing, Motor sports, Flying, Skiing, Hooping, Lego building, Ice skating

Introduction: My name is Nathanael Baumbach, I am a fantastic, nice, victorious, brave, healthy, cute, glorious person who loves writing and wants to share my knowledge and understanding with you.