An ArcGIS identity, also known as named user, grants a short-lived access token giving your application permission to access the content and services authorized to your application user's existing ArcGIS Online or ArcGIS Enterprise account. This temporary token is created using OAuth 2.0 protocol and authorizes your application to act on the user's behalf without revealing their secure password to your application. The authenticated user can access premium content and services through your application that are metered to their ArcGIS subscription; during the authenticated period, your app can access the user's content on their behalf.
If your application will access your users' secure content in the ArcGIS Platform or if you plan to distribute your application through ArcGIS Marketplace, you must use ArcGIS identity authentication.
Implement an OAuth 2.0 authentication workflow.
User authorizes your application.
The ArcGIS Platform exchanges the authorization code from user authorization for a temporary access token.
Use the access token to authenticate with ArcGIS Platform according to your specific client API.
ArcGIS identity authorization allows the user + app to perform specific tasks affiliated with the platform, such as:
If you are using one of the ArcGIS Mobile or Native SDKs, refer to that SDK's Getting Started page to implement ArcGIS identity in your app:
- ArcGIS Runtime API for Android
- ArcGIS Runtime API for iOS
- ArcGIS Runtime API for Java
- ArcGIS Runtime API for .NET
- ArcGIS Runtime API for Qt
After you complete the OAuth 2.0 authorization process, you receive a
token credential to use when accessing any content or services to which the authorized user has access.
If you use an ArcGIS client API, the
IdentityManagerclasses automatically use a
tokencredential to securely access resources, requiring no additional actions from you.
If you manually implement OAuth 2.0 authorization, you must either register the
tokencredential with the ArcGIS API
IdentityManagerclass, or pass the
tokento the appropriate method or class as a parameter.
It is possible to use ArcGIS identity with non-ArcGIS APIs, however you remain responsible to obtain, manage, and secure user credentials as a part of your application. For this method, you must implement the appropriate authentication workflow for your application.
ArcGIS identity allows individual users with an ArcGIS Online or ArcGIS Enterprise account to authorize your app to use the content and services to which they have access; it also uses their credits for any paid premium content and services.