Data Interoperability (or FME) users whose organizations secure access to ArcGIS Online using Okta need to do a little work to make FME Workbench web connections to their Online organization.
Okta is one of many identity providers available for securing ArcGIS Online sign-on. You can check Okta and other options at this site. If you attempt the usual web connection creation experience however you'll get rejected at the very last step with an error from OAuth2, this post is about making it work.
The first step is to make an App item to hang the connection off. In a browser, go to your org's home app and log in. Lets say my home is https://geo-demo.maps.arcgis.com/home/index.html.
![](/legacyfs/online/499733_pastedImage_1.png)
Authenticate using the Okta option, then go to your Content pane and add an App item.
Choose 'An application'.
![](/legacyfs/online/499734_pastedImage_4.png)
Make sure you select Application app type and give it a name and some tags:
![](/legacyfs/online/499735_pastedImage_5.png)
Then go to the item Settings tab, scroll down to the Registered Info details and choose to Update the details, and add a Redirect URI with the value http://localhost. Your details will look like this (App ID will differ):
![](/legacyfs/online/499739_pastedImage_6.png)
Copy the App ID value and App Secret values into a text editor. You need to Show Secret to expose the value.
Now start Workbench from the Analysis ribbon in ArcGIS Pro and under the Tools menu select FME Options and activate Web Connections:
![](/legacyfs/online/499771_pastedImage_1.png)
Click on Manage Services at bottom right and when the dialog appears click the small pull-down in the Add Web Service control and choose Create From > Esri ArcGIS Online.
![](/legacyfs/online/499750_pastedImage_24.png)
![](/legacyfs/online/499749_pastedImage_23.png)
![](/legacyfs/online/499757_pastedImage_27.png)
Give the service a meaningful name and description, enter the App ID retrieved earlier into the Client ID value and enter the App Secret retrieved earlier into the Client Secret. Replace the Redirect URI value with http://localhost.
![](/legacyfs/online/499758_pastedImage_28.png)
Use the Test control to bring up the authentication dialog and choose the Okta option:
![](/legacyfs/online/499759_pastedImage_33.png)
My org uses multi-factor authentication so I am invited to send a push (you may not see this):
![](/legacyfs/online/499763_pastedImage_36.png)
Then save your changes and Close the Manage Web Services dialog:
![](/legacyfs/online/499765_pastedImage_37.png)
Now back in the FME Options > Web Connections dialog click the Add Connection control (the + sign bottom left)...
![](/legacyfs/online/499775_pastedImage_2.png)
...and your shiny new Okta authenticated web service option for ArcGIS Online is available to make a connection:
![](/legacyfs/online/499767_pastedImage_45.png)
Scroll down to the service name, authenticate and you're done!
![](/legacyfs/online/499776_pastedImage_4.png)
Here is mine:
![](/legacyfs/online/499777_pastedImage_5.png)