topic Re: Which token types should be requested from OIDC Identity Provider? in ArcGIS Enterprise Portal Questions

Which token types should be requested from OIDC Identity Provider?

GSpeed_UU — Fri, 16 Jan 2026 15:16:27 GMT

My identity provider is asking which tokens I need to authorize for setting up an Open ID Connect single sign on.

The options are:

code
id_token
access_token
refresh_token

Which ones are required for ArcGIS Enterprise Portal 11.5?

Re: Which token types should be requested from OIDC Identity Provider?

JeffSmith — Tue, 20 Jan 2026 20:03:30 GMT

In most cases returning the id_token is sufficient. This assumes the id_token includes the user profile information like name and email address. If this information is not present in the id_token, Portal for ArcGIS will try to access the user profile url to retrieve this and usually requires an access_token for that.