Redirect URL Too Long Problem

[MatsHardy]

I have made an app by expenience builder on ArcGIS Enterprise 11.3. Now I would integrate the app to company's Portal with single sign-on but the problem is that the url is too long,

https://xyz.yyy.com/portal/sharing/rest/oauth2/authorize?client_id=experienceBuilder&response_type=c...
&expiration=20160&redirect_uri=https%3A%2F%2Fxxx.yyy.com%2Fportal%2Fapps%2Fexperiencebuilder%2Fcdn%2F365%2Fjimu-core%2Foauth-callback.html%3FclientId%3DexperienceBuilder%26portal%3Dhttps%3A%2F%2
Fxxx.yyy.com%2Fportal%2Fsharing%2Frest%26popup%3Dfalse%26isInPortal%3Dtrue%26isDevEdition%3Dfalse%26isOutOfExb%3Dfalse%26mountPath%3D%2Fportal%2Fapps%2Fexperiencebuilder%2F%26enablePkce%3Dtrue%26fromUrl%3Dhttps%253A%252F%252Fxxx.yyy.com%252Fportal%252Fapps%252Fexperiencebuilder%252Fexperience%252F%253Fid%253D75a083b1b3c8466580cdee8febe9f19b%26redirectUri%3Dhttps%253A%252F%252Fxxx.yyy.com%252Fportal%252Fapps%252Fexperiencebuilder%252Fcdn%252F365%252Fjimu-core%252Foauth-callback.html%253FclientId%253DexperienceBuilder%2526
portal%253Dhttps%253A%252F%252Fxxx.yyy.com%252Fportal%252Fsharing%252Frest%2526popup%253Dfalse%2526isInPortal%253Dtrue%2526isDevEdition%253Dfalse%2526isOutOfExb%253Dfalse%2526mountPath%253D%252Fportal%252Fapps%252Fexperiencebuilder%252F%2526enablePkce%253Dtrue%2526fromUrl%253Dhttps%25253A%25252F%25252Fxxx.yyy.com%25252Fportal%25252Fapps%25252Fexperiencebuilder%25252Fexperience%25252F%25253Fid%25253D75a083b1b3c8466580cdee8febe9f19b&state=%7B%22id%22%3A%22YhFcjOUqU756l5ORYTg2YFoY7ZzmpKVwNq79F7TlkPs%22%2C%22originalUrl%22%3A%22https%3A%2F%2Fxxx.yyy.com%2Fportal%2Fapps%2Fexperiencebuilder%2Fexperience%2F%3Fid%3D
75a083b1b3c8466580cdee8febe9f19b%22%7D&locale=&style=&code_challenge_method=S256&code_challenge=DoKKDG2BXSkhRicFICtMs2sTBm3kPSgEINZEfu-Nanw&
showSignupOption=true&signupType=esri&hideCancel=true&force_login=false

Are there ways to shorten the url or anything I should configure?

[EMani]

Hello @MatsHardy 

Try this format https://xyz.yyy.com/portal/apps/experiencebuilder/experience/?id=75a083b1b3c8466580cdee8febe9f19b 

[MatsHardy]

I have done so but the url is expanded during single sign-on. It seems the url is forward back and forth.

[EMani]

Hi @MatsHardy 

Can you clarify what you mean by "integrate the app to the company's Portal with single sign-on"?

[MatsHardy]

I haved added the company's openID to ArcGIS Portal so that users can login by both built-in account and openID. But when user open the app url

https://xyz.yyy.com/portal/home/item.html?id={app id}

The url is forwarded to the long url.

[EMani]

Hi @MatsHardy 

Try using the Portal item url:

https://<portal.domain>/portal/home/item.html?id=<ExperienceItemID>

[EMani]

Hi @MatsHardy 

Did you find a resolution for this? I have a similar case running, so I thought I'd let you know.

Can you please take a look at these two bugs to see if they match your issue or the workaround helps?

Logging in to the ArcGIS Experience Builder URL returns the Azure AD error: "AADSTS90015: Requested ...

This looks more like your issue. Do you by chance use Keycloak with Azure AD?

ArcGIS Experience Builder for ArcGIS Enterprise 11.5 with OAuth and Active Directory (AD) returns th...

(This one cannot be reproduced at 11.3)

Check if you have a reverse proxy/Web Application Firewall: the block is due to the HTTP URL length exceeding the global limit, which you may be able to increase for a single application or in the global policy setting. 

Check whether you have any settings that enable short URLs.

From the Keycloak Admin console, in the provider's advanced settings, you must enable the "Requires short state parameter" option. This provides a solution for the client when connecting to ArcGIS Experience Builder.