WMTS layers with tokens prompt login when added to Earth via map

[MaxMolello]

We have some WMTS layers in our portal that contain a token in the url for access, but the service is not secured other than being shared to Org in our portal. If I add data in Earth and add that layer directly using the portal item, it loads as it should in Earth. If that same layer is in a webmap in portal and I add that webmap to Earth it prompts for credentials for some reason, and if that prompt is closed the layers fail to add. This is a problem because some our portal default basemaps include these layers, so as soon as you open Earth you get bombarded with 10 login prompts that shouldn't exist, and those basemaps are not available to use like they are in Portal maps or Pro. Are these not supported or is there some other change I can make to get them to work?

[Sharon_MU]

Hi @MaxMolello ,

Thank you for bringing this concern to us.

Sorry for the inconvenience. We have logged this issue and will fix it as soon as possible.

On the other hand , to accelerate the diagnostics progress,  could you please share if you have this kind of public WMTS service? so that we can do more research for cause and solutions.

Thank you ! 

Sharon

[MaxMolello]

Sorry, I can't share that URL here as it should not be public. I can answer
any other questions though, or we could start a ticket and I could share it
with support there?

[Sharon_MU]

Hi @MaxMolello ,

It has been a long time since our last post. 

During the meantime, we dived into researching this issue by building a dedicated OGC services server.

Firstly,  WMTS service URL with a token works in ArcGIS Earth. It is supported that you directly add the URL in the Add Data panel. For example, like the following screenshot of my own testing Geoserver which hosted the WMTS service.

If the same service is to be added to ArcGIS Enterprise as a portal item,  follow the instructions here and here. 

Please be advised that `OGC WFS, WMS, and WMTS services secured with token-based authentication are not supported.` and `Do not append any parameters, such as a token, to the URL.`  

Also at the bottom of this page, you would find the limitations of OGC services. It says `You cannot edit features or add token-based secure OGC layers.`

In this case, the previous observation from your side is as expected that ` If that same layer is in a webmap in portal and I add that webmap to Earth it prompts for credentials for some reason, ...`  Please try to connect your Org admin for OGC services secured with web-tier authentication by adding the server hosting the services to your organization’s list of trusted servers.  

Hope it helps.  Please feel free to let me know if you have further questions or concerns.

Thanks! 

Sharon