Secure Cookies in ArcGIS Enterprise/Portal

[MarcoMattioli]

Hi,

our IT department asked us if we can use cookies with the secure flag enabled in our ArcGIS Portal managed apps. Our services are protected, so we need the esri_auth session cookie. I searched a bit, but I did not find anything regarding Enterprise and secure cookies. Does Portal support them? If the answer is yes, beside changing the web.config of the apps, is there anything else to do?

Thanks,

Marco

[JeffSmith]

Hi @MarcoMattioli 

Yes, Portal fully supports using secured cookies.  I'm not sure what version of Portal you are using but if your Portal is configured to use HTTPS only (under Organization > Settings > Security), then the esri_auth cookie should have the secure flag enabled automatically.