ArcGIS Enterprise 10.9.1 signing users out - session expired

Question

Hi,

We recently did a in place upgrade from 10.7.1 to 10.9.1 - all went well and the system is working as required however we are seeing alot more frequent logging out of users withthe sign in page asking the user to log in again as the session expired.  I have not been able to detect any common occurance like timeout etc since signed in.

We have modified the ArcGIS Token settings to extent the lifetime of the tokens but no luck. I have seen Portal has a token timeout set to -1 however cannot spot any documentation regarding this.

We did not experience this in 10.7.1

Is this a common occurance? We have logged it with our local ESRI support however I thought I would reach out here in addition to support.

Thanks

TerryOD · Answer

Hi @AndyBurns2 @MichaelAugust , apologies for dragging this one up.

We are experiencing similar frequent logouts after upgrading from 10.7.x to 10.9.1 - Just to clarify @AndyBurns2 - Are you saying in your case that the fix was to separate portal and server into their own app pools?

For background info, in our case - we were on 10.7.x and were having some portal freezing issues during periods of high use, which would force app pool to restart and force a reauthentication, our local ESRI support separated the portal/server web adaptors into separate app pools, which fixed that issue.

Then the upgrade from 10.7.x to 10.9.1 brought in the 'authentication loop issue' with WAB apps, which our local support patched, or at least enabled us to not go into an infinite loop.

But now, at 10.9.1 we are seeing frequent logging out of apps as per your issue.

We have a call in with local support but just thought I'd share our experience too.

Cheers

AndyBurns2 · Answer

Hi,

We managed to sort it out with our support here.

We deployed via AWS Cloudformation template provided by ESRI Inc. This put both the server and portal in the same IIS app pool. On prem deployments from our local support always separate portal and server into their own app pool as we using the web adapter.

Once we did this, we have not had any issues for over 10 days.

Thought I would post to see if its worth checking this.

MichaelAugust · Answer

Yeah we've tried extending the main Portal timeout setting to a couple hours, seems to go away for a while if our troubled users clear their cache, but then somehow comes back. They are forced to re-sign in and they lose any settings to the layers involved in the webapp, ie, transparency, on/off, arrangement, etc. and the web app starts over. It's kicking them approx every half hour. Thanks for getting back to me! If we figure anything out I'll post here.