Portal: External Esri Tile Service Returns 403 Until Credentials Are Re-Saved (Same Password)

ThijsSchouten

Hello Esri community,

We are using ArcGIS Enterprise Portal and added an external secured tile service as an item, with stored Basic Authentication credentials.

Service:

https://trueortho.arcgisonline.nl/arcgis/rest/services/Caches/TrueOrtho_RD_Tiled/MapServer

Behavior:

• The layer works at first.
• After some time (sometimes hours, sometimes up to a week), tile requests start failing with HTTP 403.
• The failing requests are through the Portal proxy

/sharing/servers/<id>/rest/services/​

• If we re-enter the exact same username and password in the item credentials, it starts working again.

Important detail:

• The upstream password does not change.
• User usersessions are still valid.
• So it seems the stored credentials are still correct, but Portal’s use of them becomes invalid over time.

Questions:

1. Is there a known credential/session TTL in Portal for stored Basic Auth on external services?
2. Is this a known issue in Portal proxy credential handling?
3. Is there a way to solve this, without building a custom proxy?

Any guidance would be greatly appreciated.

Kind regards,
Thijs

MohammedSubair

As per my understanding , There is no credential TTL for stored Basic Auth in ArcGIS Portal, so this is not an expiration issue.

The fact that you get 403 (not 401) through /sharing/servers/<id>/rest/services/ strongly suggests the upstream tile service or network layer is rejecting Portal’s proxy requests after some time (often due to WAF, IP throttling, or connection reuse issues in ArcGIS Server).

Re-entering credentials works because it resets the proxy connection/auth flow, not because the password changed.

Most likely root cause is upstream security or caching behavior blocking Portal’s long-running proxy sessions, not Portal credential expiry.