topic Re: Invalid redirect_uri in ArcGIS GeoEvent Server Questions

Invalid redirect_uri

SharonMeier — Thu, 17 Mar 2016 14:25:47 GMT

Is anyone familiar with Error: 400 (Invalid redirect_uri)? I have installed ArcGIS Server 10.4, GeoEvent Extension 10.4, Portal 10.4 and the ArcGIS DataStore, as well as web adapters. Have federated portal and server, and set my server as the hosting server in Portal. However, when I try to launch GeoEvent Manager I receive this Invalid redirect_uri error.

Re: Invalid redirect_uri

DennisGeasan — Tue, 22 Mar 2016 21:36:11 GMT

Hi Sharon,

I find the easiest way to get to 10.4 GEE Manager running on a federated AGS is from another machine on your network.

If accessing GEE manager on the machine it is running on, IE comes up blank, Chrome yields Error 400, or 500 if you use a Portal Token. Firefox eventually works but you have to import the SSL certificates from both AGS and Portal.

Re: Invalid redirect_uri

KennethOGuinn — Wed, 13 Apr 2016 22:58:06 GMT

I have found that this is normally as a result of registering the web adaptor with Portal via one URL, and accessing it via another.

For example you browse to https://internalmachine.domain.com/portal and register your web adaptor with Portal.

Then you try to access the Portal via https://dnsalias.domain.com/portal. As a result the Portal basically says "hey, I was told to the web adaptor was at https://internalmachinename.domain.com/portal, but I see a connection coming from https://dnsalias.domain.com/portal, and I was never told to trust that URL, better be safe than sorry; invalid_uri redirect 400"

The easiest way I've found to resolve the issue is to unregister the web adaptor from Portal, and then in your browser with the URL you intend to access portal through like https://dnsalias.domain.com/portal, re-register it with portal. At that point Portal knows to trust the web adaptor from that location.

Please note that if you do unregister the Web Adaptor you will not be able to access your Portal via the web adaptor for the duration of it being unregistered.

This is a somewhat common issue for Esri Support Services, so if you have access to support, I'm sure they can walk you through the process of sorting this out.

If not, here is the documentation on how to unregister a web adaptor.

Unregistering ArcGIS Web Adaptor with Portal for ArcGIS—Installation Guides (10.4) | ArcGIS for Server

Here is the follow up doc on how to register it again.

Configure ArcGIS Web Adaptor—Installation Guides (10.4) | ArcGIS for Server

Hope this helps!

Ken O.

Re: Invalid redirect_uri

Haider_Ali — Tue, 24 May 2016 16:43:28 GMT

I am having same issue, Sharon Meier did you found a solution for this problem?

I have no issue accessing portal with web adaptor url but accessing geoevent processor manager it gives me 400 error

Re: Invalid redirect_uri

SharonMeier — Tue, 24 May 2016 17:47:03 GMT

I had to include the port number (6143) in the URL for the GeoEvent manager.

Re: Invalid redirect_uri

Haider_Ali — Tue, 24 May 2016 18:37:11 GMT

Well my url is https://gisserver.domain.net:6143/geoevent/manager/index.html

but it gives me 400 error and if i unfederate the portal withe server then its working fine

Re: Invalid redirect_uri

SimonJackson — Sat, 23 Jul 2016 11:11:01 GMT

Hi Kenneth OGuinn Thanks for this advice. However, how about this scenario...

Domain name = https://dnsalias.domain.com
The CNAME of this domain points to the IIS on an machine where I have 10.4.1 Portal, Server, Data Store and GeoEvent installed and federated. (e.g. https://machinename/arcgis/home)
Machine is on Azure, Windows Server 2012
The PFX certificate from https://dnsalias.domain.com has been applied to the root of IIS
Portal for ArcGIS and ArcGIS Server still using their Self Signed Certificates
I can access Portal for ArcGIS and ArcGIS Server via this DNS alias and login fine (e.g. https://dnsalias.domain.com/arcgis/manager
GeoEvent does not flow through IIS/Web Adapter, so have to hit it on https://machinename:6143/arcgis/home
But because this is not known/trusted by the Portal, then its going to give me the invalid_uri error

Any ideas on how to get around this? Really appreciate any help or pointers you can provide.
I saw a bug at 10.3 (fixed at 10.4) which suggests that this should be possible, I just imagine I need to make some additional config changes.

BUG-000092043 : The GeoEvent Processor in a federated ArcGIS for Server and Portal for ArcGIS environment does not allow users to login to environments which utilizes a DNS name for their Portal site.

Re: Invalid redirect_uri

SusmitaDuncan — Wed, 27 Jul 2016 22:39:14 GMT

Did anyone figure out a resolution to this? I just setup a 10.4.1 test environment, and decided to federate the ArcGIS Server that has GeoEvent ext on it (to try to fix authentication issues through PI Integrator). I get the same issue as the OP. Because GeoEvent manager runs on port 6143, Portal won't let you get to it.

Re: Invalid redirect_uri

SimonJackson — Wed, 27 Jul 2016 23:31:50 GMT

Hi Susmita Duncan - perhaps we should team up. Im also setting up an environment for the PI Integrator on Azure, and with some help from Esri Support, have got this running now.

Can you explain a little more about your environment?

- are you using an external DNS?

- have you applied a domain/CA certificate to IIS or your DNS?

- Are you using IIS and the ArcGIS Web Adaptor?

Simon

Re: Invalid redirect_uri

VHolubec — Fri, 22 Jun 2018 06:38:10 GMT

Hi,

I met the same problem - I have portal on FQDN, but the Geoevent was opening on localhost URL - I have changed the localhost to FQDN URL, and the GeoEvent manager opens fine.

Re: Invalid redirect_uri

DebendraBiswas1 — Sun, 04 Jul 2021 07:35:02 GMT

Hi @SimonJackson ,

Just want to know, did you ever get this resolved, I am stuck with same situation.

Re: Invalid redirect_uri

JiaLiu1 — Thu, 17 Mar 2022 18:07:07 GMT

Hi DebendraBiswas1, Did you find the answer? I'm stuck, too.

Re: Invalid redirect_uri

DebendraBiswas1 — Thu, 17 Mar 2022 19:36:17 GMT

Hi @JiaLiu1

My issue was that, whenever I was federating ArcGIS server, the ArcGIS server itself along with GeoEvent Manager were redirecting to portal login page and in a flick of a second redirecting to Error: 400 (Invalid redirect_uri) page.

My issue got resolved by updating the portal Web Adaptor URL from fully qualified domain name to internal server like https://hostname:7443/arcgis

Note that, you do not have to unregister the portal from web adaptor, you can just add /edit at the end of the url which will allow you to edit the configuration

https://<hostname>/portal/portaladmin/system/webadaptors/7658bc2b-45ca-4516-8252-e3440774b5c6/edit

Hope this helps.

Cheers

Debendra

Re: Invalid redirect_uri

JiaLiu1 — Thu, 17 Mar 2022 19:55:01 GMT

Hi Debendra, Many thanks for the quick response. My issue is different then. My setup is an Azure VM. In the Azure VM, I can get to GeoEvent Server through https://machinename:6143/geoevent/manager but get "This site can't be reached when I use https://fqdn:6143/geoevent/manager in the VM and from another machine. My understanding is for streaming services, I'll need the latter to work. The 6143 port is open in the VM. I don't what else I'm missing.

Re: Invalid redirect_uri

DebendraBiswas1 — Thu, 17 Mar 2022 20:29:49 GMT

Hi @JiaLiu1

Apologies for getting it wrong.

Regarding accessing GeoEvent manager from outside machine using FQDN, may I ask you what do you mean by opening the port..? Is this through window's firewall or you have configured an inbound rule to listen on port 6143. ?

Regards

Debendra

Re: Invalid redirect_uri

JiaLiu1 — Thu, 17 Mar 2022 20:36:11 GMT

Hi Debendra, I have similar setup as in your screenshot of the Azure VM Networking for port 6143. I don't think it's Windows Firewall, as in the VM I can access GeoEvent Manager using machinename:6143 but not fqdn:6143. Am I wrong?

Re: Invalid redirect_uri

JiaLiu1 — Fri, 18 Mar 2022 17:38:15 GMT

My case is more like @SimonJackson. Want to let the group know that I was able to resolve the issue: Even though the port is open in Azure > <VM> > Networking, but I still need to create new rule to open port 6143 on the VM Windows Firewall. Many thanks to @DebendraBiswas1.

Re: Invalid redirect_uri

DebendraBiswas1 — Fri, 18 Mar 2022 17:57:52 GMT

Glad to know that your issue is resolved @JiaLiu1