Is there a hidden trick to using OAuth in enterprise?

[DCarlson12]

I’ve been struggling to get OAuth working on an app I’m developing in an enterprise environment. I’ve added the ArcGISAppId and ArcGISPortalUrl in my IConfiguration and confirmed that the AuthenticationManager is seeing them through DI. Calling AuthenticationManager.Login() doesn’t appear to immediately call anything, and even trying to stop the MapView from displaying the default ESRI login credentials through the specified MapView attributes or other IConfiguration items does not point to my enterprise portal, all of the network calls end up going to the vanilla ArcGIS online default /generateToken endpoint.

My OAuth2 stuff is registered correctly in my portal environment, I can plop everything manually in my browser url bar with a code response type specified and get one fine.

Am I missing something or doing something wrong?

[CoderDeltaLAN]

I think the missing piece is PromptForOAuthLogin, rather than PromptForArcGISKey or AllowDefaultEsriLogin, since those still use Esri’s fallback login. Set ArcGISPortalUrl to the portal root, for example https://host/portal, and add PromptForOAuthLogin="true" directly to the MapView. What exact portal URL are you passing?

[DCarlson12]

I do have PromptForOAuthLogin set on my MapView as well. The portal url being pulled in from the config is for the enterprise portal I’m working in e.g https://myorggis.company.com/portal.

[CoderDeltaLAN]

Thanks, that rules out the obvious config issue. Could you share your GeoBlazor version and the first auth URL triggered by Login()? I’m trying to work out whether GeoBlazor is still initializing against ArcGIS Online, or whether that /generateToken call is coming from one of the map’s secured resources.

[DCarlson12]

Thanks, that rules out the obvious config issue. Could you share your GeoBlazor version and the first auth URL triggered by Login()? I’m trying to work out whether GeoBlazor is still initializing against ArcGIS Online, or whether that /generateToken call is coming from one of the map’s secured resources.

I’m on the latest 4.6.1, using only Core. I am also using server rendering mode. Calling await AuthenticationManager.Login() in OnAfterRenderAsync() in my component does not appear to call any /generateToken or /oauth2 endpoint related to my enterprise portal or ArcGIS itself besides a /self introspection endpoint against my enterprise, looking at the network calls in my browse. If I include the MapView in the component, as stated earlier with the noted attributes, then the map appears to call for for ArcGIS online…

I am using Chrome 150.0.7871.102 mainly, but also checked Edge and I get the same behavior.

[CoderDeltaLAN]

That /self request doesn’t confirm the OAuth login—it also runs for anonymous users. Since ArcGIS Online only appears when the map loads, could you share the MapView/Map markup and the full ArcGIS Online request URL? My guess is a basemap or portal item is still pointing there, but the URL should confirm it.