Enable token acquisition through an HTTP GET request—ArcGIS Server (2024)

When using ArcGIS Server token-based authentication, acquiring an ArcGIS token is only allowed through an HTTP POST request. Acquiring a token through an HTTP GET request (or HTTP POST request with credentials in the query parameter) is possible, but disabled by default. If your organization uses applications that rely on acquiring a token in this manner, follow the steps below to enable token acquisition through an HTTP GET request.

Caution:

Although using a GET request is a convenient method of acquiring a token, a user's credentials are provided as part of the URL and may be stored in browser history or in network components. It's recommended that you update your applications so that tokens are not acquired through a GET request.

  1. Log in to the ArcGIS Server Administrator Directory. The URL is formatted http://gisserver.domain.com:6080/arcgis/admin.
  2. Click security > tokens > update.
  3. In the Token Manager Configuration dialog box, update the following properties. If necessary, add the properties manually.
    • To acquire a token through an HTTP GET request, set the allowHttpGet property to true.
    • To acquire a token through an HTTP POST request with credentials in the query parameter, set the allowHttpPostQueryParams property to true.

    For example:

    { "type": "BUILTIN", "properties": { "allowHttpGet": "true", "allowHttpPostQueryParams": "true", "longTimeout": "1440", "sharedKey": "VYHyatfGUlFWHgnAVMEc40nL1rn7s+l190vtgMjCx3c=", "shortTimeout": "60" }}

  4. Click Update.

Feedback on this topic?

Enable token acquisition  through an HTTP GET request—ArcGIS Server (2024)

FAQs

Enable token acquisition through an HTTP GET request—ArcGIS Server? ›

Log in to the ArcGIS Server Administrator Directory at http://gisserver.domain.com:6080/arcgis/admin. Browse to security > config > update. For the Protocol parameter, choose the HTTP and HTTPS option and click Update. This automatically restarts your ArcGIS Server site.

How do I enable HTTP on ArcGIS Server? ›

Log in to the ArcGIS Server Administrator Directory at http://gisserver.domain.com:6080/arcgis/admin. Browse to security > config > update. For the Protocol parameter, choose the HTTP and HTTPS option and click Update. This automatically restarts your ArcGIS Server site.

How do I get my ArcGIS access token? ›

Open the URL http://gisserver.domain.com:6080/arcgis/tokens in a web browser.
  1. Enter the following information: User name: The name of a user authorized to access the resource. Password: The user's password. Client: This parameter enforces restrictions on how the token may be used. ...
  2. Click Generate Token to get the token.

What permissions do I need to grant to the ArcGIS Server account? ›

Permissions to grant to the ArcGIS Server account

The ArcGIS Server account requires no special permissions on the operating system other than file access to the data, configuration store, and server directories. The ArcGIS Server account does not need to be an administrator on the machine.

What is the expiration time for ArcGIS portal token? ›

If an expiration time isn't specified, each kind of token has a default expiration value: ArcGIS token: 120 minutes. OAuth access token, when created with the Implicit or Client Credentials grant types: 120 minutes. OAuth access token, when created with the Authorization Code grant type: 30 minutes.

How do I enable HTTP activation? ›

Activate Windows Communication Foundation (WCF)
  1. From the Start menu, select Administrative Tools > Server Manager.
  2. Select Add roles and features from the Dashboard.
  3. Select Next twice.
  4. Select Features.
  5. In the Features area, expand the: - . ...
  6. Under WCF Services select: - HTTP Activation.

How to connect to server using HTTP? ›

Select the protocol to use ( http:// or https:// ). Use the Server field to enter the name or IP address of the HTTP server. Do not include the scheme (i.e. http:// ) in this field. If your server is listening on a non-standard port (80 for http:// and 443 for https:// ) then enter the port number into the Port field.

How do I send an access token request? ›

Sending an access token in a request

When you put a VerifyAccessToken policy at the front of your API proxy flow, apps must present a verifiable access token (also called a "bearer token") to consume your API. To do this, the app sends the access token in the request as an "Authorization" HTTP header.

How can I get access token authorization code? ›

The following section describes the steps for obtaining the access token and refresh token using the authorization code grant mechanism:
  1. Step 1: Authenticate a User and Create a User Session.
  2. Step 2: [Optional] Generating Client Credentials.
  3. Step 3: Generate Authorization Code.
  4. Step 4: Exchange Auth Code for a Token.

How do I get access tokens? ›

Get Access Tokens
  1. To request an access token , make a POST call to the token URL.
  2. When a user authenticates, you request an access token and include the target audience and scope of access in your request. ...
  3. In only one specific instance, access tokens can have multiple target audiences.

What is the authorization code for ArcGIS? ›

In the ArcGIS Administrator, click the Desktop folder, select the appropriate Single Use product, and click Authorize Now. Select I have received an authorization file from Esri and browse to the (*. respc) file. Click Next so the applications will be authorized and ready for use.

How do I enable Esri access in ArcGIS? ›

At the top of the site, click Organization and click the Members tab. Search for members by name or username and apply filters to narrow the members list. Sort the list as desired, such as by name or last login date. for the member for whom you want to enable access, click Enable Esri Access, and click OK.

How do I authorize ArcGIS? ›

A valid authorization file is required for ArcGIS Server. To reconfigure your machine with an updated authorization file, run through the Software Authorization wizard again. To open the Software Authorization wizard at a later time, click Start > Program Files > ArcGIS > Software Authorization.

How do I fix an expired access token? ›

Once expired, you need to re-authenticate to obtain a new token. Doing this prevents the same token from being used for an extended period of time, thereby reducing the risk of misappropriation. You can also use refresh tokens to renew new access tokens.

How do I get ArcGIS token? ›

Open the URL https://gisserver.domain.com:6443/arcgis/tokens in a web browser.
  1. Enter the following information: User name—The name of a user authorized to access the resource. Password—The user's password. Client—This parameter enforces restrictions on how the token may be used. ...
  2. Click Generate Token to get the token.

What happens when access token expires? ›

In this article. When a token has expired or has been revoked, it can no longer be used to authenticate Git and API requests. It is not possible to restore an expired or revoked token, you or the application will need to create a new token.

How do I enable HTTP ports? ›

Enable or Disable HTTP/HTTPS Ports
  1. Log on to Universal CMDB.
  2. Select Administration > Infrastructure Settings.
  3. Enter either http or https in the Filter (by Name) box to display the HTTP settings. Enable HTTP(S) connections. True: the port is enabled. ...
  4. Restart the server to apply the change. Caution.

How to enable HTTPS on server? ›

How to properly enable HTTPS on your server
  1. Buy an SSL certificate.
  2. Request the SSL certificate.
  3. Install the certificate.
  4. Update your site to enable HTTPS.

Top Articles
Research Guides: Battle Studies, Country Studies, & Staff Rides: Barbary Wars & the Battle of Tripoli
Priority Mail International - Rates & Features | USPS
Ups Stores Near
News - Rachel Stevens at RachelStevens.com
Mr Tire Prince Frederick Md 20678
Bellinghamcraigslist
biBERK Business Insurance Provides Essential Insights on Liquor Store Risk Management and Insurance Considerations
Edgar And Herschel Trivia Questions
Sotyktu Pronounce
Jscc Jweb
Hallelu-JaH - Psalm 119 - inleiding
Gas Station Drive Thru Car Wash Near Me
House Party 2023 Showtimes Near Marcus North Shore Cinema
6813472639
Games Like Mythic Manor
New Stores Coming To Canton Ohio 2022
Patrick Bateman Notebook
Best Uf Sororities
iZurvive DayZ & ARMA Map
Yard Goats Score
Sulfur - Element information, properties and uses
Homeaccess.stopandshop
SuperPay.Me Review 2023 | Legitimate and user-friendly
Craigslist Maryland Trucks - By Owner
Stihl Dealer Albuquerque
Kentuky Fried Chicken Near Me
Breckiehill Shower Cucumber
Jesus Revolution Showtimes Near Regal Stonecrest
Enduring Word John 15
Democrat And Chronicle Obituaries For This Week
Movies - EPIC Theatres
'Conan Exiles' 3.0 Guide: How To Unlock Spells And Sorcery
Xfinity Outage Map Lacey Wa
Boondock Eddie's Menu
Cars And Trucks Facebook
Sinfuldeeds Vietnamese Rmt
John F Slater Funeral Home Brentwood
Domino's Delivery Pizza
How to play Yahoo Fantasy Football | Yahoo Help - SLN24152
Mvnt Merchant Services
What Is Kik and Why Do Teenagers Love It?
303-615-0055
Immobiliare di Felice| Appartamento | Appartamento in vendita Porto San
2132815089
Linkbuilding uitbesteden
Tyco Forums
Barback Salary in 2024: Comprehensive Guide | OysterLink
Blog Pch
Makemkv Key April 2023
15:30 Est
Naughty Natt Farting
Loss Payee And Lienholder Addresses And Contact Information Updated Daily Free List Bank Of America
Latest Posts
Article information

Author: Nathanael Baumbach

Last Updated:

Views: 6161

Rating: 4.4 / 5 (75 voted)

Reviews: 82% of readers found this page helpful

Author information

Name: Nathanael Baumbach

Birthday: 1998-12-02

Address: Apt. 829 751 Glover View, West Orlando, IN 22436

Phone: +901025288581

Job: Internal IT Coordinator

Hobby: Gunsmithing, Motor sports, Flying, Skiing, Hooping, Lego building, Ice skating

Introduction: My name is Nathanael Baumbach, I am a fantastic, nice, victorious, brave, healthy, cute, glorious person who loves writing and wants to share my knowledge and understanding with you.