I have ArcGIS Enterprise 10.5.1 set up in a customer's environment.Their ArcGIS Server is Federated to Portal. Their environment consists of:
- Web Server - hosting
- Portal for ArcGIS
- Portal Web Adaptor in IIS
- ArcGIS Web Adaptor in IIS
- App Server - hosting
- Database Server (SQL Server)
They have Web Tier Authentication activated and map services are shared to groups within Portal.
When my token has timed out, if I try to access a webmap through portal's map viewer it fails to authenticate and I get invalid token messages in my browser console and in the Server logs.
If I access the service directory as the same user via the arcgis web adaptor, I find that I need to click the login link and this seems to generate a valid token, that will then allow my webmap to work in the map viewer (or any other web app), until the token times out again.
Can anyone explain why this is happening?
The web server does have an alias to the hostname, but AFAIK everything has been set up on the web server using that alias (not the actual internal hostname). The alias is in a different domain to the internal server name. Don't know if this infomation is relevant but I've included it in case it is.