Changing Security Settings in AGOL

[AprilChipman]

I have an established AGOL organizational account with several hundred services and maps that are used daily. Unfortunately, none of the services or maps are secure. IT is working on completely re-vamping security settings for everything (not just maps) and the new company website will not accept any links that are not secure.

What will happen to all of the existing maps and services, including any maps or apps that have been saved as favorites on user desktops and tablets, or embedded into various websites, if I make the switch in Server and AGOL to HTTPS?

Will I have to republish all of my services?

Will I have to rebuild all of those maps and apps?

Will I need to track down all those websites and send them new code to embed a newly secure map?

Or, will everything automagically renew itself to the HTTPS setting? (please, oh please, oh please, oh please...!!!)

[KellyGerrow]

Hi April,

If you are using hosted services as your data sources in your web maps and apps, then the urls may work in your web maps and apps when you make the change to https only. This can be affected by the app you are using and how the layers were added to the web map.

If you are updating an ArcGIS Server or reference other insecure services in your web maps, you will need to modify the url to use the correct https in the web map. You can do this with AGO Assistant for the web maps that need to be modified: ArcGIS Online Assistant. As a rule of thumb, you may want to enable https only on your organization and check through your content to estimate how many urls you will need to update. This setting can be changed back to http and https if needed. 

I'd suggest checking the content in the organization to see what the level of effort to make this change will be.

-Kelly

[AprilChipman]

Just to make sure I completely understand what I'm getting myself into before I click that little button... 

How can I make sure I am using hosted services as the data source for my web maps and apps?

[KellyGerrow]

Hi April,

There is no way from the item details to know which architecture (ArcGIS Online or ArcGIS Server) was used. As an organization do users usually publish services to ArcGIS Server and add them to a web map or does publishing and web map creation all happen in ArcGIS Online. You can use The ArcGIS Online Assistant to view the web map JSON for each web map and identify whether the service URLs are ArcGIS Online urls or ArcGIS Server Urls based on the domain.