Generate Token with IWA

[ChrisCowin_dhs]

Hello,

My organization uses IWA and SSO. I'm trying to provide access to a non-esri user to query our geocoding endpoint through PowerBI through a built-in account as they are not in the AD group to allow access to IWA/SSO for Pro/Enterprise.

The main issue I'm coming across is that when I try to generate a token though the portal endpoint (/sharing/rest/generateToken) to provide to the geocoding enpoint with the built-in's username and password it always fails and there seems to be zero documentation on how to get around this. The only solution to get around this that they provide is to Logout and use the 'Login again or as a different user' button in the html of the API but that button just signs me into my account and doesnt allow me to try to sign into the built in. And neither of those even solve the issue of how to do it through HTTP requests.

[JakeSkinner]

Hi @ChrisCowin_dhs,

In Portal > Organization > Settings > Security, do you have ArcGIS Logins disabled:

Or, do you have Windows Authentication enabled in IIS for Portal's web adaptor?

[ChrisCowin_dhs]

The later, it is enabled through IIS

[JakeSkinner · Accepted solution]

For your token URL, try the following instead so you're going around the web adaptor:

https://portal.domain.com:7443/arcgis/sharing/rest/generateToken

[ChrisCowin_dhs]

Hmm when I go to that location it is a 404 error

[JakeSkinner]

You might have the URL incorrect.  Are you specifying the fully qualified domain name of the server that has portal installed?  You don't want to specify the web adaptor server or DNS.