ArcGIS runtime fails to use portal credential to access federated server content

EricLiu — Wed, 29 Apr 2026 00:08:36 GMT

Hi, normally we ask the user to sign in to the owning portal via OAuth2. Then when they access content from a federated server, I can see the runtime is automatically adding the access token from the OAuth2 credential to the server request. However, for some of our systems, the runtime time fails to do so.

Instead, it makes a request to "<portalUrl>/generateToken?f=json&serverUrl=<serverUrl>&client=referrer&referrer=<name of referrer>". Its seems to be making a request for an AccessTokenCredential, except it left the username, password, and/or token parameters empty. I looked at the headers and could not find any credentials there. Therefore the request is invalid. The response is:

{"error":{"code":400,"message":"Unable to generate token.","details":["Unable to get 'token' from the request or cookie, for server token."]}}

Stacktrace:

at Esri.ArcGISRuntime.Http.HttpDispatcher.SendAsync(HttpRequestMessage request, HandlerOptions options, CancellationToken cancellationToken)
at System.Net.Http.HttpClient.<SendAsync>g__Core|83_0(HttpRequestMessage request, HttpCompletionOption completionOption, CancellationTokenSource cts, Boolean disposeCts, CancellationTokenSource pendingRequestsCts, CancellationToken originalCancellationToken)
at Esri.ArcGISRuntime.Security.ArcGISTokenWebRequest.RequestTokenAsync()
at Esri.ArcGISRuntime.Security.ArcGISTokenCredential.GetArcGISTokenAsync(Uri tokenServiceUri, Uri serverUri, String portalToken)
at Esri.ArcGISRuntime.Security.ArcGISTokenCredential.GenerateTokenImplAsync(ServerInfo serverInfo)
at Esri.ArcGISRuntime.Security.TokenCredential.TokenGenerationRequest.CreateGenerateTask()
at Esri.ArcGISRuntime.Security.TokenCredential.GenerateTokenAsync(Uri serviceUri, String userName, String password, GenerateTokenOptions generateTokenOptions)
at Esri.ArcGISRuntime.Security.AuthenticationManager.GetCredentialAsyncInternal(CredentialRequestInfo credentialRequestInfo, Boolean retry, Boolean throwOnCancel)

1. Could someone clarify how the authentication flow is supposed to work for federated servers ? If I have a valid OAuth2 credential to the owning portal, can I assume the runtime will use that credential to sign-in to the federate server ? If not, what other steps are needed.

2. Is this a bug with ArcGIS runtime ? The fact that its making a request with missing parameters makes it seems like something has gone wrong under the hood.

3. Could using SSO or a reverse proxy on the server/portal cause this ? I'm trying to isolate the factor causing this issue. Nevertheless, I never received an authentication challenge for Proxy or NetworkCredential from the runtime, its always Token authentication type in CredentialRequestInfo.

ArcGIS Enterprise 11.5. ArcGIS .NET Maui Runtime 200.8.1. .NET Maui 9.0.120.

topic ArcGIS runtime fails to use portal credential to access federated server content in .NET Maps SDK Questions

ArcGIS runtime fails to use portal credential to access federated server content