Sharing content with everyone - Why does some content get a challenge, some doesn't?

Anonymous User

I have created a web app, shared with everyone, and sent a link to some people. They can see it fine.

I added a pdf file to my AGOL account, shared with everyone and sent the link and they get challenged.

Why do some items which are shared with everyone generate a sign-in challenge and others don't? Is this documented anywhere?

Is it as simple as: "Apps can be shared without a sign-in challenge, but other content cannot."?

Thank you,

Randy

Anonymous User

In the case of a pdf, the storage back end is Amazon S3. The original link that you open after you share publicly looks something like this: https://yourorg.maps.arcgis.com/sharing/rest/content/items/6409f8be0e574f1c966196345b6f9ea6/data

When you open that link, it redirects to AWS S3 and appends a short lived token so the link will expire. This looks something like this: https://ago-item-storage.s3.us-east-1.amazonaws.com/6409f8ae0e574f1c966196345b6f9ea6/ArcGIS_Enterprise_Security_-_Advanced.pdf?X-Amz-Security-Token=IQbJb3JpZ2luX2VjEKT%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLWVhc3QtMSJHMEUCIHdtdrYrTEuko8LP%2BuBHBGXZYWFwVUepAejhZGdByY8mAiEAon2ir2Waz%2BChl9gzyCVt4Z3NlqPV3X8hyihHIsJyZXwqtAMIHRAAGgw2MDQ3NTgxMDI2NjUiDBG09%2BXMysVYcmnaSiqRA4lrXQ0rncCJChQ%2BXNlwy5nY%2FDusep9cKSnqOlaJDnyxk6qxFEUHQ2NrAFRR1ZG1VaEQMU9sKuP%2BOTXGYppuZVCBavXzjPV7LI2KKUGPTRxCHntmkfnfixrdnKeiPoFuWvjpHBxyFZUD0nKITlBLE8NsG3adV%2BInKEQrGPuPrhlp0MsLfMOrBjn1MReiSS9wJL3l%2BtgeqipyQBLEOrK2xmNEhrNSkmu8j9ik4jrd9WIqZTKBk%2FuIDAxwHAicO03Xxf7DLMYR9Ehe9RRz%2BlcZuSY8FOqOUmrX1XQOOp3D13QF5QnC6N4kMdnqpTLBQmIHoVFFQr5fYm6LIjdUO%2B7V4jL%2B0uvXkjtZgAzMEqdwgNzS5XKsxk1LTf4amMkV0tec9pAFLzj%2FoDRM7QY%2F2277MmsKS85IBsiRpA77oRIwAyqFn1L7FIMibInPrzOc0r1S%2FaC8iSz5lJDLXfpRxwImYQpxQkPFqWYfFEvsMGDoVU6qf3%2FibL3PPtCYAesjIu5jB9LK%2BGl32pDOcEXOdrHgLAFNMMWpy%2F0FOusBycyumRgEYpvVfT4MV16h6%2FKH1DAE7a%2Bnl9vuD1VO9C%2BGeG02mo4%2FVubYe%2F5EuCWzHegG4wlpQ2oodE9Gz8nOREJNzvMGDYe1nNf6qelGISZvu3c67jAq94KS1xW%2BU2TVphgxU3QcnKtu4NIK9Au0W%2Fb94AcVsBoLLilxnd1QocfdfrKxYTU723iXrOfuBPLimQKS%2B1aTOI2BpOXnonL%2FL%2B9EjATU0iefqn4MyUzm4XkERSVhJNWSY2Y3ydwMtM6Lpyp30gOp6mv3ZzMNR2w%2BTh3eCsvttwhfW5zMr%2BgOnJ7q8OlptMbDdAluZQ%3D%3D&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Date=20201116T205536Z&X-Amz-SignedHeaders=host&X-Amz-Expires=300&X-Amz-Credential=ASIAYZTTEKKE6QCOUIQH%2F20201116%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Signature=be7d798215e58d26cd97bd964bfc580db7e1af2b759660c7b236443ff84e0467

If you share the Amazon S3 link it may initially open for the end user, but it will eventually expire. So what you have to do is share the original ArcGIS Online link (e.g.https://yourorg.maps.arcgis.com/sharing/rest/content/items/6409f8be0e574f1c966196345b6f9ea6/data) which will automatically redirect with the appropriate authentication parameters.