nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Message asking for access to local device when opening organization-shared maps

MathiasHudock

Some members of my organization have been seeing the below message when viewing Organization-shared web maps and web experiences in AGOL, specifically while using the Chrome browser:

This message doesn't seem to be related to a specific user type; two of our users have the same user type and role, but one gets the message, and the other doesn't. It also does not appear when viewing publicly-shared items. Has anyone seen this kind of thing before?

Find more posts tagged with

Accepted answers

All comments

SarahNoakes1

I've discovered that rather than using an embed web part in SharePoint, if you use a Modern Script Editor web part, you can add an iframe and the allow parameter doesn't get stripped out 🙂

SarahNoakes1

Hi,

I have had exactly the same issue - my AGOL apps are consuming services served from my standalone ArcGIS Server site, so internal users were seeing the message "experience.arcgis.com wants to connect to any device on your local network".

My IT people have fixed the issue - I'm not sure exactly what magic they used, but anything *.arcgis.com now has local network access automatically set to allowed.

I have some apps that are embedded into web pages - these also need allow="local-network-access" adding to the iframe. I've done this and it works.

However, I have some apps that are embedded into Sharepoint. Adding allow="local-network-access" to the iframe for these hasn't worked. The web team updated the site on Friday, but the parameter just doesn't filter through to users:

If anyone has any idea how to fix this I'd really appreciate the help.

Thanks,

Sarah

cjms

IT can deploy an administrative template (with this setting disabled) to your group policy

https://support.google.com/chrome/a/answer/187202?hl=en

MichaelB25

I may have found more helpful info. We are only seeing the issue in users connected to our VPN (all work PC's), and not by the public. We serve our AGOL apps from a server, apps.[mydomain].com (this is the address in the "Access to fetch at" message in my last post.

It seems that on our network that URL resolves to a private IP, 172.31.x.x

Whereas, from outside our network it resolves to our external host (cloudflare).

MichaelB25

Not sure if this is related, but looking at the Chrome console when Local Network Access is not allowed, and trying to view a simple Experience Builder app, I selected the problematic basemap and see the following errors. These errors don't appear in the console when Local Network Access is allowed. I substituted "[...]" for my domain.

---

Access to fetch at 'https://[...]/gisis/rest/services/pictometry25/MapServer?f=json' from origin 'https://experience.arcgis.com' has been blocked by CORS policy: Permission was denied for this request to access the `unknown` address space.

Failed to load resource: net::ERR_FAILED

[esri.layers.TileLayer] #load() Failed to load layer [...]

KevinHigh

I just noticed this in Edge as well.

The biggest issue for us is that this is happening for people outside of our network, members of the public have encountered issues too. Our web adaptors reference ".local", which I suspect is the issue. I'm not really sure of another way of configuring our web adaptors to get around this...

MichaelB25

We've been dealing with this on Chrome, but...

I was just alerted to this problem in Edge (ver. 143.0.3650.66 and .75) , when viewing a public Experience Builder app. The solution is similar to Chrome, click the padlock icon to the left of the browser URL and change Local Network Access to "allowed" and refresh.

Hopefully we will have a permanent solution which doesn't require this permission from user.

TravisColeHC

Unfortunately, this appears to be another “just-deal-with-it” situation from both Google and Esri. Google has published a blog explaining the issue here: https://developer.chrome.com/blog/local-network-access

In short, Google recommends either:

Implementing an agency-wide policy to allow access to experience.arcgis.com, or
Instructing users to manually click “Allow” when prompted.

So far, the prompt seems to appear only for users on the same local network as the data being accessed. In our case, most of the utilities and datasets are hosted in our Enterprise geodatabase. Even though our Experience Builder app is hosted on ArcGIS Online (AGOL), denying access blocks not just the print utility and geolocator, but also any datasets used from our Enterprise REST services in the app.

I went back and forth with Chrome developers, and they confirmed this is expected behavior. However, they were curious why Experience Builder was triggering the prompt in the first place, as accessing local storage in this way is considered atypical.

Todd_Metzler

Our organization has also been affected by this. We have chosen to notify our users of the problem, advising users to NOT "Allow" and interact with Web GIS using MS Edge or Firefox while our client tech team enables an enterprise fix. Unlike some of the solutions already posted, our organization's web browser configuration are controlled by policy so individual user initiated changes to browser settings isn't a workable solution. Web GIS troubleshooting 101 here. Has the perceived problem been tested in more than one browser? Is the result repeatable in more than one browser? Yes, we can accept that Chrome is likely the most popular browser. Sometimes it doesn't get the job done for WEB GIS.

DanielMarcolesco

We were having issues connecting to imagery services on a local network when using online maps. Clicking "Allow" on the "Look for and connect to any device on your local network" fixed the issue for us. This permission can also be corrected when "Block" is clicked by clicking the "View site information button" to the left of the URL, toggling on "Local network access", then reloading the page.

Justin_Greco

We decided to just send out communication to all our users stating that it is safe to select allow as a short term solution. The long term fix will be for our IT to set this enterprise Chrome policy:

https://chromeenterprise.google/policies/#LocalNetworkAccessAllowedForUrls

I don't know if there is something Esri can do about this, I do see that we can access our local network from the Map Viewer at www.arcgis.com, so I am thinking there must be something on their end allowing it, so maybe the same can be done to experience.arcgis.com.

The biggest issue for us has been our custom JavaScript applications hosted on our web servers.

TravisColeHC

This just started happening to our county Map Viewer. It has major impacts on the functionality of the Experience Builder app. If you just close the pop-up or hit block, at the very least, our geolocator and print services stop functioning in the app. I haven't tested other functionality yet, but I suspect there are other things that also don't work properly.

Justin_Greco

This is due to a security change in the latest version of Chrome:

https://developer.chrome.com/blog/local-network-access

This is affecting only our staff that are on the city network and only affecting services being served through our web adaptor. I believe the issue is that our web servers resolve to a local IP address while connecting from our network. It is not affecting anyone connecting from outside our network.

You can disable it in Chrome all together by going to chrome://flags/#local-network-access-check and switching the setting to "Disabled".

Join the Conversation

Signed in members can post, follow updates, and more. New here? Register a free account.

Quick Links

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.