Cant login to Survery123 when already logged in to ArcGIS Enterprise

Question

ArcGIS Enterprise 10.9.1

First what works. When the customer uses the link below to login to Survey123 in a browser where they are not logged in to their ArcGIS Enterprise it works fine:

https://survey123.arcgis.com/?portalUrl=https://host.domain.com/portal

If they are already logged in to ArcGIS Enterprise in the same browser and use the above link or the application set up in ArcGIS Enterprise, the login redirect that happens when you click Sign in on the Survey123-webpage tries to access the internal server instead of the webadaptor server.

It should redirect to: https://webadaptorhost.domain.com/portal

but instead redirects to: https://internalhost.domain.local:7443/ which of course isn't available externally.

This happens even if you open the link in a incognito-browser. While logged into ArcGIS Enterprise in a regular browser window.

Is there a setting somewhere that affects this or what can I do to investigate this further?

LarsMagnusson · Answer

Hi, the survey123hub redirects looks like this, it has both internal and external urls:

{
"appId": "survey123hub",
"redirectURIs": [
"https://webadaptorhost.domain.com",
"https://internalhost.domain.local",
"http://*.arcgis.com",
"https://*.arcgis.com"
]
}

ZacharySutherby · Answer

Hello @LarsMagnusson,

If you navigate to https://webadaptorhost.domain.com/portal/portaladmin > Security > OAuth > Get App Info > enter survey123hub for the App ID.

In the redirect URIs for the survey123hub App ID is https://internalhost.domain.local:7443/ set?

If so does adding the external URI resolve the issue?