We have an ExB application running on top for ArcGIS Enterprise 10.9.0. AGS enterprise is using Integrated Windows authentication to authenticate users and Single Sign On is enabled (users never enter their credentials).
The application works fine, however after 30 minutes or so, they authentication seems to "timeout" and the user gets a message saying "Please sign in to access the item" (see below). You can't put your credentials here since the system is using IWA, so the only way to continue using the app is to reload the full app and start over again.
I thought it might be due to inactivity, but it's not. I even added a component that will make a query to Portal every minute to see if this will keep it alive, but didn't work.
Any thoughts on this?
Thanks!
Alejandro
@ClangDevGuy please can you provide some information to this thread? @John_Tyll he'll have something for you soon. apologies for the tease, I know how frustrating esri bugs can be!
Oh boy, I am not sure this will be a guarantee fix for everyone, but I can go through my journey that may be of some help, keeping in mind that “your mileage may vary”.
Environment setup:
Looking back, I would have just spent more time with a pure ArcGIS JavaScript SDK solution instead of trying to leverage ExB...
Thanks @ClangDevGuy I am starting down the path of investigating/implementing your suggestions. Really appreciate you taking the time to post! Hope it helps me and others!!!
@John_Tyll, I just remembered one more thing we tried as well. We have our Enterprise running in a Windows environment so, for our Web Adapter we had our IIS application pool separated out for Portal.
I apologize that I cannot say what exactly was "the fix" because it has been a series of trying multiple things to get it working. I hope it does help others because our users became very frustrated with it (and it drove me nuts as well 🙂).
Thanks to ClangDevGuy for the write-up and helping guide to a solution that worked for us. Sharing here in hopes that it helps others.
1) Changed Max Token Expiration Minutes to -1
2) Disabled all SignIn methods other than IDP. No problem for us since we only use IWA.
Either one or both of these changes eliminated the log-in prompt from triggering in our Experience builder applications. We are using ExB Dev 1.14 and Enterprise 11.3.
Hope it helps!
@Marshal - using the portal admin I don't see any output that matches your Portal Settings.png image. IS there a url to that page, you could share or is it just a nice image to get the point across?
Thanks in advance!
John
The screenshot is from the sharing configuration URL after clicking the update operation.
Bottom of the documentation below has further instructions on getting there.