ArcGIS for Portal 10.3.1 - Sign in page Unauthorized

6513
10
06-09-2016 05:37 AM
JimSchindling1
New Contributor II

When attempting to sign in to our newly installed Portal, the option to 'Create An Account' appears and functions correctly. When the account is created  have full access to the site and can list Groups and previously created Users. However, the site does not allow existing users to sign in. The message 'Unauthorized' appears in red.

Below is a screenshot of what is appearing.

This issue is similar to one that was previously posted but there was no resolution given. I appreciate any advice.

Login Problem.JPG

Tags (2)
10 Replies
Francisco_R
Esri Contributor

Hi,

  • Have you opened the right ports?
  • Have you waited for the Portal to restart after creating the admin account (It takes a few minutes)?
  • Have you installed ArcGIS web adaptor for Portal?

After all these steps... Do you still get the "Unauthorized" message?

Kind regards,
Francisco
Support Analyst at Geodata AS
JimSchindling1
New Contributor II

Thanks Francisco,

I have opened ports 7080, 7443, 7005, 7099, 7199, and 7654. I think that's all that are required.

I have restarted the portal service and the web adapter is setup for portal. Still the same error.

One additional piece of information is that our server URL is set up with additional levels in the domain path. The format is aaa.xxx.yyy.zzz.com. In the help at  http://resources.arcgis.com/en/help/main/10.2/index.html#/Installing_the_ArcGIS_Web_Adaptor/017s0000...  there is a note that says that says that "attempting to configure the Web Adaptor so the URL includes additional levels is not supported and may cause problems with client applications".

Any chance that this may be causing the issue?

0 Kudos
JonathanQuinn
Esri Notable Contributor

What request is failing?  Run Fiddler or open the web debug tools to see the request that's returning the unauthorized error.

0 Kudos
JimSchindling1
New Contributor II

Hi Jonathan,

The request is to https://<ourserver>/arcgis/sharing/rest/oauth2/authorize?client_id=arcgisonline&redirect_uri=https://<ourserver>/arcgis/home/postsignin.html...

The local javascript method being executed is "checkOAuthResponse"

0 Kudos
JonathanQuinn
Esri Notable Contributor

I can't even register the web adaptor with multiple levels:

I'll keep playing and see what I get.

0 Kudos
AngeloCirocco
Esri Contributor

I experienced this issue with Portal for ArcGIS 10.5.1, and it was related to an issue with the portal content directory not being valid on a network file share.

Upon re-installation, and ensuring that the content items got created when the administration account was created the issue was resolved.

Hope this helps 

GirishYadav1
New Contributor III

Hi Angelo Cirocco

I am deploying ArcGIS Enterprise 10.5.1 on AWS and facing the exact same issue after the installation of portal. I am using file share for the portal content store. 

Can you please elaborate on the process that you followed to resolve this issue? How to "ensure that the content items got created when the administration account was created"?

Thanks

0 Kudos
AngeloCirocco
Esri Contributor

Hi Girish

the UNC path the content/items folder should have around 7000 items in it.  We found that the folder had to be called "content", if we used a different name we got the error above.

Kind Regards,

Angelo

JohnBrockwell
Occasional Contributor III

Add me to this list of Portal Administrators dealing with this gem.

I had a SINGLE SPACE between the " and the URL. This is how I fixed my issue:

PortalAdmin> Home>Security>OAuth

1.) Get App Info for "arcgisonline".

2.) Review.

3.) Update App Info.

Broken (Unauthorized):

 

{

   "appId": "arcgisonline",

   "redirectURIs": [

       " https://SERVERNAME.DOMAIN",

       "https://SERVERNAME.DOMAIN ",

       "*.arcgis.com",

       "https://SERVERNAME.DOMAIN ",

       "https://SERVERNAME.DOMAIN",

       "https://SERVERNAME.DOMAIN ",

       "https://SERVERNAME.DOMAIN"

   ]

}

 

Fixed:

{

   "appId": "arcgisonline",

   "redirectURIs": [

      "https://SERVERNAME.DOMAIN",

       "https://SERVERNAME.DOMAIN ",

       "*.arcgis.com",

       "https://SERVERNAME.DOMAIN ",

       "https://SERVERNAME.DOMAIN",

       "https://SERVERNAME.DOMAIN ",

       "https://SERVERNAME.DOMAIN"

   ]

}