URL Parameter : token

[GuillaumeArnaud]

Hi

I want to use an app generate by ExperienceBuilder in an iframe where user is auth. I try to add a "token" URL Parameter to get an automatic login to a non public app (with non public webmap). With a webappbuilder app I write <appurl>?token=<token>. This syntax doesn't work with experience builder.

Is there a mean to do that ?

thanks

Guillaume

[GuillaumeArnaud]

Hi

I want to use an app generate by ExperienceBuilder in an iframe where user is auth. I try to add a "token" URL Parameter to get an automatic login to a non public app (with non public webmap). With a webappbuilder app I write <appurl>?token=<token>. This syntax doesn't work with experience builder.

Is there a mean to do that ?

thanks

Guillaume

[TonghuiMing]

The sso REST endpoint supports it, so this could work: 

https://www.arcgis.com/sharing/rest/oauth2/authorize/sso?redirect_uri=https://experience.arcgis.com/experience/{appID}&client_id=experienceBuilder&canHandleCrossOrgSignin=true&token=xxx 

[AlessioDiLorenzo]

Is it valid for operations dashboard also?

[BethLott]

Can you confirm that the SSO REST endpoint with the experience.arcgis.com URL works, vs "could work"? We have a similar requirement for an application that cannot be public.

[TomPattison1]

Anyone get this working?  Really need a solution here.

[TomPattison1]

Doesn't this still require credentials login for ArcGIS Online?  Need way to handle credentials behine the scene like we could with Web Application Builder.  What is Esri's response to this?

[AlessioDiLorenzo]

Not working. It redirects to the arcgis online login page.

The idea is granting the access to a secured resource (an experience, for example) behind the scene to users that are not registered to arcgis online, through the token. 

[lah]

Also desperate for a solution to this - this is a major limitation. ESRI support has also not been able to provide any suggestions, outside of making the app and data public (obviously not a viable option). 

I've also looked into Dashboards and Instant Apps - neither of them are able to do this either. I'm really trying, but it's impossible to move away from WAB at this point.

[DavidHerries1]

Any updates on this, also need the same use case to allow a token to be used.

[DaniIsenegger]

Same for us. In order to migrate from WAB app to ExB, the possibility to authenticate using a token is mandatory