I'm trying to demo a Web Application which I have hosted in ArcGIS Online. The idea is that it should be available to non-ArcGIS Online users and so I want to use the application authentication rather than a user sign in. At the moment the app is built using a map and a layer and all three are shared with everyone. This works fine using a link similar to the following since the token in the URL allows the application to authenticate itself.:
http://www.arcgis.com/apps/Viewer/index.html?appid=123456&token=blablabla
However, I don't really want the map and layer shared with everyone but when I unshare one of them then the app asks for a user sign in. Reading the documentation I'm thinking that the app should still work using the application authentication since the app owner is also the owner of the map and layer. Any ideas why this is not working?
