access token

An access token is an authorization string that provides access to secure ArcGIS content, data, and services. An access token is created by implementing a type of authentication. Access tokens are used to authenticate individual requests to ArcGIS services. Access tokens contain the scope and permissions available to access resources, and their capabilities vary based on the type of authentication used to obtain them. The format is either an API key or an OAuth 2.0 token.

There are three types of authentication that can be used to obtain an access token:

• API key authentication: This creates a long-lived access token that grants your application access to ArcGIS services and secure items in your portal.
• User authentication (formerly ArcGIS identity): This generates a short-lived token via OAuth 2.0, authorizing your application to access secure resources on behalf of a signed in ArcGIS user.
• App authentication: This generates a short-lived token via OAuth 2.0, authorizing your application to access ArcGIS services and secure items in your portal.

An access token is also used to track the usage and cost associated with making requests to ArcGIS services with ArcGIS Location Platform and ArcGIS Online.