topic Re: Multifactor Auth in AGOL & the Python API in ArcGIS API for Python Questions

Multifactor Auth in AGOL & the Python API

GregMcNamee — Mon, 30 Sep 2019 17:26:11 GMT

Is there no way to create GIS object connecting to an ArcGIS Online org, using the credentials of a user that has multi-factor authentication enabled? Our org requires administrators to use multi-factor authentication, but I can't find a way to log in to the org via the Python API. I keep getting this error:

If there's not a way to do it, is there a plan to add a mechanism to do so?

Re: Multifactor Auth in AGOL & the Python API

JeroenBaltussen1 — Thu, 07 Sep 2023 10:26:35 GMT

Hoi,

This issues is also very relevant for our organisation.

Do you maybe have an update for this item.

Jeroen Baltussen

Re: Multifactor Auth in AGOL & the Python API

Jonathan_Goergen — Thu, 02 May 2024 16:52:55 GMT

I cannot run scripts to AGOL and I suspect MFA is the issue. Are there ways to utilize scripts with MFA implemented? I use to use scripts like below to access REST services, and generate tokens for the irritating "Token Required" message at REST endpoints for services I published while I am online:

params = {'f': 'pjson', 'username': userName, 'password': pw, 'referer': 'https://www.arcgis.com', 'expiration': 21600}
tokenURL = 'https://www.arcgis.com/sharing/rest/generateToken'
response = requests.post(tokenURL, data = params, verify = False)
token = response.json()['token']

Re: Multifactor Auth in AGOL & the Python API

BenCapell_NWTF10 — Thu, 11 Dec 2025 14:56:33 GMT

I also need access to AGOL items via the ArcGIS API for Python while MFA is enabled on my account. Has there been any movement on this issue?

@HenryLindemann Do you have any recommendations? I saw you were able to answer a different authenication issue here.

Update:

The code below will provide access to items in the GIS (assuming the key was configured with access to the items). However, the lyr.manager.truncate() function errors while MFA is enabled. The function works successfully when MFA is not enabled.

url = 'yourorg.arcgis.com' apikey = 'apikey-fromA AGOL' gis = arcgis.gis.GIS(url, api_key=apikey)

Re: Multifactor Auth in AGOL & the Python API

BenCapell_NWTF10 — Wed, 17 Dec 2025 15:04:21 GMT

I found that using the OAUTH2.0 scheme works best for my process. With MFA enabled and the developer credential item in AGOL I am able to complete the lyr.manager.truncate() call after accessing the content through the GIS object that has been authenticated with the OATH2 token.
The process detailed here was most helpful: https://community.esri.com/t5/arcgis-api-for-python-questions/python-api-authentication-by-oauth2-0-quot/m-p/1416113/highlight/true#M9952

Additional OAUTH background links from the Esri Developer site:

https://developers.arcgis.com/python/latest/guide/working-with-different-authentication-schemes/#user-authentication-with-oauth-20

https://developers.arcgis.com/documentation/security-and-authentication/user-authentication/#oauth-credentials

https://developers.arcgis.com/documentation/security-and-authentication/user-authentication/oauth-credentials-user/