topic Re: Invalid redirect_uri - error 400 in ArcGIS Enterprise Questions

Invalid redirect_uri - error 400

BlueSky17 — Mon, 19 Jul 2021 17:58:40 GMT

I get an Invalid redirect_uri error while trying to access ArcGIS Server using IP address. If I replace the ip address with server name: https://servername.loc:6443/arcgis/rest/services I don't have a problem accessing the services.

However, if I type: http(s)://1.1.11.111/arcgis/rest/services - it still populates the list of folders that are in the server but once I click on the folder it will give an Invalid redirect_uri error. See attached snapshot.

Obviously, the redirect link from the folder structure using ip address is not pointing the right direction but unsure, how to fix it. We have the server federated with portal and webadaptor.

Let me know please if someone came across similar error and was able to fix it. Thank you.

PS: We run ArcGIS Server 10.6.1

Re: Invalid redirect_uri - error 400

ChristopherPawlyszyn — Tue, 20 Jul 2021 11:59:45 GMT

In a federated ArcGIS Server site, the Portal for ArcGIS site that it is federated with takes over the control of the security of the site. This means that redirection to the OAuth2 endpoint for Portal will verify the redirect URI and make sure it's one of the recorded, allowed entries. In this case, only the Services and Admin URLs used during federation would be allowed URIs for secured services, otherwise any other DNS alias or the IP address will return the invalid redirect error message.

Are you having issues with accessing the REST Services page using the correct URLs?

Re: Invalid redirect_uri - error 400

JonSwoveland — Tue, 20 Jul 2021 15:56:24 GMT

I subscribed to this thread in hopes someone from esri would respond. It would be really, really nice if Portal supported multiple allowed redirects in such cases. I get a significant number of clients that want to access their arcgis server via multiple DNS aliases. Most commonly, this is for supporting both internal and external hostnames.

Re: Invalid redirect_uri - error 400

JonathanQuinn — Tue, 20 Jul 2021 19:09:20 GMT

While there is a workflow to update the redirect_uri list, @ChristopherPawlyszyn is correct in that once federated, Portal only knows about two URLs for federated servers; the services URL and the administration URL. These are the only URLs that can be used to access Server Manager, (assuming the services URL is either only using a reverse proxy or load balancer, or in the event you're using the web adaptors, they have admin access enabled).

Updating the redirect_uri list likely won't help situations where you have multiple URLs you need to access services through, for federated servers at least.

Re: Invalid redirect_uri - error 400

BlueSky17 — Wed, 21 Jul 2021 17:46:27 GMT

Thank you for your reply. I made this work :).