Sign-In prompt when accessing Settings in Portal

[Anonymous User]

Hello,

i found some weird behavior in an installation of ArcGIS Portal. When trying to access the Settings in the Organization tab i get a login prompt even though I am already logged in. The prompt also shows a wrong URL that is missing the prefix (e.g. portal.westeurope.cloudapp.azure.com/portal).

If i just close the prompt, i can access the site and everything seems to work just fine. But whenever I refresh the page it shows up again. I can also not sign in, but I guess that´s because the domain is wrong.

I did check the WebContext URL as well as the WebAdaptor settings and everything seems to be correct. I also compared the settings with a portal that works fine and could not find any differences.

Anyone has any idea what that might be?

It´s the Portal Version 10.7.1 running in an Microsoft Azure VM with two webadaptors configured (portal and server).

[Anonymous User · Accepted solution]

Well, I managed to solve the problem. I don`t exactly know what it was, but the was something wrong with the federation of the ArcGIS Server. After un-federating and federating again everything seems to work fine.

[AllanAxon1]

Alexander, I'm getting the same dialog but for me it shows to login to the server domain, not the external site name I use in WebContextURL. I haven't tried unfederating because I have 3 ArcGIS Server sites federated with this portal

[SimonSchütte_ct]

I observed a similar behaviour when IWA was configured for Portal, but the IIS Server Webadaptor was configured accidentally with anonymous access disabled and Authentication enabled.

Most recently I had the same prompt in ArcGIS Enterprise 10.9.1 without IWA. I still need to figure out how to resolve the issue. Unfederating is not a good solution.

[skarri]

Hi Team,

After the installation in one of the environments, We found some strange behavior when accessing portal for ArcGIS- Organization>>Settings tab.

We get a prompt to sign in  “ https://<xxx>. <xxx>.com/portal” ( please see the screen shot below)

Two things observed:
1. Click OK and provide the credentials, everything seems to work fine
2. Just close the prompt or hit “Cancel” or X out of it, everything seems to work fine.

We are using version ArcGIS enterprise 11.1; its a multi machine deployment with web adaptors and a Load balancer. We have tried to add /edit in the URL  ( Solved: Web adaptor for portal - Esri Community) but still no luck.

I am little hesitant to do unfederate and federate; Did anyone resolve this issue without unfederating?

Important info: Checked the prompt URL( screenshot attached) - the server/host name in the URL  is webserver where all the web adaptors were installed.

Thanks
Sateesh

[SeanBrooks]

I am having the exact same issue. The message occurs the first time you access settings after login. I can click OK or Cancel and everything works as it should. If I click OK there is a blank dialog that tries to appear and immediately disappears. The portal login message mentions my independent dev portal. This message is happening on a new 10.9.1 portal single machine deployment with no content on a cloud VM.

I now have content loaded so the unfederating solution is not possible. Does anyone else have other ideas or solutions to this problem?

Do license files contain url information? could I have imported the wrong license into portal?

Sean,

[Ian_Ice]

I just resolved this issue with a new ArcGIS Enterprise 11.4 deployment. This is comprised of a single machine base deployment behind our firewall with portal/server webadaptors installed on our DMZ (for public access). Installation and federation worked just fine. My first issue was that on our DMZ using the alias.domain.gov/portal, it wouldn't let me sign into the portal. It kept giving me a bad uri redirect error. Updating the WebContextURL in Portaladmin system properties to our external facing alias.domain.gov/portal fixed that issue. The second issue was the constant sign-in prompts when navigating anywhere in the Portal's organization settings when I was already logged in as the primary admin account. I could click X and it seemed to let me go about my business, but when I tried to sign in again with admin credentials in the prompt, it said "Unable to access the authentication service." Similar behavior when accessing test content I created in portal by that same user. When I opened the content in a Map, It asked for my credentials and didn't let me login to see the content. 

I noticed the sign-in prompt referenced https://dmzmachinename/portal, not https://dmzalias.domain.gov/portal. I ended up changing the url in the portaladmin/system/webadaptors/edit and found the web adaptor url referenced the https://dmzmachinename/portal url, so I updated it and I still got the exact same sign-in prompts referencing the same incorrect portal url. I then found the Server's admin/security/config referenced the incorrect url (using dmz machine name) under portal properites (Portal URL). I went to update that url and it kept giving me the error "Can’t edit the url: Failed to update the security configuration. Cannot update security configuration to federate with Portal as server is not registered with Portal."

Here's what did the trick. I un-federated the server, un-registered the server web adaptor, and instead of using the default url "http://localhost/server/webadaptor" to configure the server webadaptor on the dmz (which the software launches after installing the web adaptor) I used "https://dmzalias.domain.gov/server/webadaptor" to complete the configuration and Bingo! I noticed the completion message said to "Use the following URL to access the Services Directory: https://dmzalias.domain.gov/server/rest/services" whereas the previous attempt using the localhost url resulted in the message "Use the following URL to access the Service Directory: https://dmzmachine/server/rest/services." I re-federated and configured it as the hosting server role again and no more sign-in prompts in Settings or accessing content. The ArcGIS Server admin/security/config Portal properties displayed the correct alias.domain.gov/portal url as well. I sure hope this helps someone!