I use Collector and I can't attach files to my layer because of that:
ArcGIS Online supports ArcGIS Server authentication (not Web Tier authentication) for adding and accessing secure services. When you add a secure ArcGIS Server service to a map, ArcGIS Online prompts you for credentials every time you access the service. Credentials are not stored in the map. ArcGIS Online takes care of obtaining a token for authentication; there is nothing additional you need to do. You should not attempt to append a token to the URL when you add a service to a map.
Is there any action for getting it work with Web tier authentication? Collector now is useless, because of that.