esri_aopc missing

Bernd_Loigge

Hi @JeffSmith ,

We're facing the same or a similar issue as described in the linked post. We are on ArcGIS Enterprise 11.3.

Our custom JavaScript application uses the IdentityManager to authenticate against our Enterprise Portal. However, the esri_aopc cookie is never created. Embedding Dashboards and Scene Viewer within our application via iframes works fine, but embedding StoryMaps via an iframe always results in a login screen.

When the user clicks the login button, the StoryMap fails to load and the login screen is shown again. On the second attempt, the StoryMap opens in a new browser tab with an error.

In the browser's developer tools, I can see that when clicking the login button the first time, login.microsoftonline.com tries to set the esri_aopc cookie — but because it's a third-party cookie (despite everything running under the same domain), it fails. I assume this happens because the login flow runs inside an iframe and is treated as third-party by the browser.

Is there any supported way to force the creation of the esri_aopc cookie during the login process via IdentityManager?

I'm also unsure whether the workaround mentioned in the linked post is considered a recommended or supported Esri approach.

Thanks in advance!

Bernd_Loigge

After a bit of reverse engineering and inspecting the redirect URI used when logging into the portal, I discovered that the OAuthInfo for the portal sets the appId value to "arcgisonline".
Previously, we had been using the application item's appId (client ID) from the portal for our JavaScript application.

However, when we set the appId to "arcgisonline"—just like the portal does—the esri_aopc cookie is set correctly, and StoryMap items can be displayed within an iframe.