Cannot store credentials for AGOL tiled basemaps in Portal

[FrankPotempa]

When adding AGOL tiled basemaps to Portal for ArcGIS there is no option to store credentials. Also when I add the proper credentials I am continuously prompted to reenter. I have three separate Portal instances setup in our global enterprise where only one allows me to store the credentials for the tiled basemaps, where as the other too fail to offer this option. I have reviewed the configurations and security setups and have determined a similar configuration as they should be. The configuration consists of single server instances with properly federated servers and IWA with external access through a secure firewall.

The only trouble shooting guidance from a previous ESRI support ticket has been possible issues with the firewall and valid certificates. I did try to do some tracing with Fiddler as suggested by ESRI and do notice a token call but no evident error is captured. Fiddler can be troublesome in some internal environments if you haven't noticed.I have updated and have verified valid CA certs on all machines. I can still use the tiled basemaps in Portal and Collector without issue once I re-enter the valid AGOL credentials however this is becoming a nuisance issue for our users.

Has anyone experienced similar scenarios and if so did you resolve them?

I am re-opening the ticket with ESRI to see if we can resolve as well as working with my IT group  on these specific servers firewall rules.  

10.3.1 platform;

Server, Portal, WAs, Desktop

IIS 7

WinServer 2008 R2

[PaulReichart1]

I'm experiencing the same problem, no option to store credentials for tiled basemaps. Did you ever get this resolved?

Thanks.

[FrankPotempa · Accepted solution]

Yes it was. It was based on a configuration issue which we resolved;

an issue with Portal for ArcGIS 10.3.1 when trying to store credentials for adding ArcGIS Online basemaps. We recently spoke over the phone and resolved this issue with the following:

When you try to add an item to Portal, it runs a checkUrl.jsp request to the outbound resource, off your network.

https://server.name.com/arcgis/sharing/checkUrl.jsp?url=https%3A//tiledbasemaps.arcgis.com/arcgis/re...

This request originates from the javaw.exe process of Portal on the Portal machine as that user. If your environment is configured to use a forward proxy, it is essential to tell Portal this, which we did with the below workflow:

http://server.arcgis.com/en/portal/10.3/administer/windows/using-a-forward-proxy-server-with-portal-...

We specifeid your proxy name and port for HTTP and HTTPS outbound connections. This picked up and now items could be added and the credentials could be stored, fixing the issue at hand.

[AlexanderBrown5]

Frank,

Why are you utilizing a secured tiled basemap for the Nat Geo basemap?  If you just need the basemap to run in your web map and through collector I would try this:

NatGeo_World_Map (MapServer)

In general, I usually reference this link for all ESRI provided basemaps: Folder: /

~Alex