topic Re: Ops Dashboard Token Expiration in ArcGIS Dashboards Questions

Ops Dashboard Token Expiration

BrianWilson3 — Mon, 16 Dec 2019 15:13:04 GMT

Has anyone had any luck getting ESRI to fix the token timeout issue with OpsDashboard and IWA/Portal? I opened a ticket back in August and have yet to get a resolution.

Environemnt:

Portal 10.7.1, IWA auth, Operations Dashboard web client.

Behavior:

Initially SSO works and the dashboard comes up, after exactly 30 minutes the token expires and the app prompts for auth. If i signin, it prompts multiple times for sign in and eventually lets you through.

I have been able to temporarily "fix" the issue by added a meta refresh tag at 25 minutes into the Ops Dashboard HTML.

My original Bug number was #BUG-000124152 which was marked as "Not in Current Product Plan" in early December. In the case it mentioned that i was actually experiencing #BUG-000127276, which BTW was resolved in 10.7?

I am still experiencing the issue but have reopened the case. This seems very similar to the token timeout that WAB was seeing in 10.6/10.6.1 which was resolved in 10.7. It would be great if someone from ESRI would reach out to atleast a few people affected by these bugs and ask if it was resolved.

The original thread where this was first mentioned was here https://community.esri.com/message/897492-re-wab-token-expiration .

Re: Ops Dashboard Token Expiration

JohnSolly4 — Wed, 18 Dec 2019 17:41:08 GMT

Hey Brian!

I took a look at both those bugs (BUG-000124152, BUG-000127276) and it looks like there were some issues with this across several applications, not just Operations Dashboard.

The bug I am following with regard to Dashboard is BUG-000126844. We (The Dashboard team) have a fix, but it will go into 10.8.1 with no plans to hotfix/patch older versions of Enterprise. This bug affected IWA, PKI, and SAML authenticated environments (Web Tier).

Once we have finished testing the fix, BUG-000126844 will be closed.

These other Web Tier Authentication bugs have also been fixed and are planned to go into 10.8.1

BUG-000126814

BUG-000126162

Hope that answers your questions!

Re: Ops Dashboard Token Expiration

BrianWilson3 — Wed, 18 Dec 2019 17:48:24 GMT

Excellent, thank you John. I will give my current case worker the bug you've provided.

Sent from my Verizon, Samsung Galaxy smartphone

Re: Ops Dashboard Token Expiration

BrianWilson3 — Wed, 18 Dec 2019 18:59:12 GMT

John,

Looking at the bug you referenced I dont see the same behavior I am experiencing noted. Ours will log in just fine initially, after 30 minutes it prompts for auth when it shouldn't being iwa and sso. Can you confirm you have seen this behavior and it's fixed in the 10.8.1? I want to make sure its documented and fixed so it is resolved in 10.8.1.

Thanks,

Brian

Sent from my Verizon, Samsung Galaxy smartphone

Re: Ops Dashboard Token Expiration

JohnSolly4 — Wed, 18 Dec 2019 20:51:11 GMT

Hey Brian. There is also this issue, BUG-000126814 that will be fixed in 10.8.1. That one specifically mentions the 30 min time window + sign in prompt.

"In Portal for ArcGIS configured with IWA, Operations Dashboard for ArcGIS using a web map with a refresh interval greater than 30 minutes configured for a layer results in an authentication prompt after the expiration of the refresh interval."

I am pretty certain that the fix we put in should address what you are seeing. There was a bug that caused several side effects causing the waterfall of IWA issues. Basically, all of these issues have the same root cause.

Re: Ops Dashboard Token Expiration

BrianWilson3 — Wed, 18 Dec 2019 20:55:00 GMT

Excellent, thank you john. I look forward to 10.8.1

Sent from my Verizon, Samsung Galaxy smartphone

Re: Ops Dashboard Token Expiration

BrianFausel — Wed, 18 Dec 2019 22:41:49 GMT

Hi John,

Any idea when 10.8.1 might be released? I assume the pattern is 10.8.0 in Q1 2020 and then 10.8.1 around the Esri UC time in summer?

Re: Ops Dashboard Token Expiration

TomManson — Thu, 19 Dec 2019 09:09:54 GMT

Hi Brian,

I'm experiencing the same issue in 10.7.1, and John Solly (with Derek Law) kindly pointed me in this thread's direction. Since 10.8.1 is some way off, are you able to share your 'fix' please?

Thanks in advance,

Tom

Re: Ops Dashboard Token Expiration

BrianWilson3 — Thu, 19 Dec 2019 13:34:27 GMT

Sure Tom. I must warn you though, i'm sure ESRI frowns upon editing the base code of their widgets. I always create a backup copy of the file prior to editing anything in the Portal file system.

On your Portal server, navigate to Program Files\ArcGIS\Portal\apps\opsdashboard this folder.

Make a backup copy of the index.html file.

edit the original index.html file

in the head section, add this meta refresh tag, i grouped it in with the rest of the metas.

Save the file, clear your browser cache and give it a try.

1200 second refresh equals 20 minutes. Even though the app crashes at 30 minutes, i was still seeing some issues with the refresh at 25 minutes. This tag will just refresh the entire page and grab a fresh token every 20 minutes. As our dashboards are crucial to operations here and are displayed on our video wall, having to F5 the dashboard every 30 minutes wasn't an option.

Hope this helps.

Re: Ops Dashboard Token Expiration

BrianWilson3 — Thu, 19 Dec 2019 13:39:09 GMT

I would also like to know when 10.8.1 will be available.

Re: Ops Dashboard Token Expiration

TomManson — Thu, 19 Dec 2019 15:26:50 GMT

Your solution has done the trick!

Thanks,

Tom

Re: Ops Dashboard Token Expiration

BrianFausel — Fri, 20 Dec 2019 19:37:24 GMT

Thanks for the tip, Brian, and also clearing up the confusion over the various IWA bugs. I tried your temporary solution with the index.html and it works great.

In our case we will have to wait for the official 10.8.1 fix, though, because the auto-refresh at 20 minutes will be jarring for our users. If they have Dashboard filters set, the refresh resets them every 20 minutes and I'm sure that will lead to frustration.

Re: Ops Dashboard Token Expiration

BrianWilson3 — Fri, 20 Dec 2019 19:43:06 GMT

It is very frustrating. It is unfortunate that we've had to work around this issue in this way.

Sent from my Verizon, Samsung Galaxy smartphone