OAuth credentials (for user authentication)

OAuth credentials (for user authentication)
in a portal.

OAuth credentials are an used to support authentication workflows. They are required to implement and using workflows.

Most flows require a valid client_id from a set of OAuth credentials. They also require a redirect URI to be configured in the OAuth credential settings.

Create OAuth credentials (for user authentication)

You can create by using the Developer credentials tool in your .

The steps to create OAuth credentials with an are:

  1. Sign in to your .

  2. Click Content > My content > New item and select .

  3. In the Credential types menu, select .

  4. Add a redirect URL and click Next.

  5. In the Privileges and Grant item access menus, click Next; these are not required for .

  6. Name the credentials and click Next to review. When you are ready to create the credentials, click Create.

Redirect URLs

A redirect URL is a required parameter of flows. This is the URL that your application will direct users to after they successfully authenticate.

Redirect URLs are managed as a property of . They can be added to your credentials during the creation process, or any time through the Settings panel of the credentials .

To add a redirect URL to your developer credentials, complete the following steps:

  1. Sign in to your and search for your .

  2. Go to the of the credentials and click Settings > Application.

  3. Under Redirect URLs, add the URL that you want to direct users to after completing authentication. This URL varies based on your application and typically takes the format of "https://<server>[:port]/callback.html" or "http://my-arcgis-app:/auth". This is a valid web page or server endpoint to which a user can be redirected after successful sign in.

    • For example, if you are running an application on https://localhost:8080, add https://localhost:8080/callback.html to the list of redirect URLs. The exact URL depends on the name of your callback page and the programming language you are using. If you are following a "Sign in with user authentication" ArcGIS tutorial, it will specify the name of your callback page.
    Redirect URL

Privileges and item access

When implementing , your application inherits all and item access rights from the signed-in . Although provide settings to manage privileges and item access, these settings are not used in user authentication. To learn how OAuth credentials manage privileges and item access for other types of authentication, go to OAuth credentials (for app authentication)

Referrers

Referrers DEV
The referrers field for developer credentials

A referrer is an HTTP header field used to identify the client requesting a server resource. This functions as a security measure, allowing applications to confirm their client's identity. When have a specific HTTP referer header set, services can confirm that an incoming request's referrer matches one of the valid referrers assigned to that access token.

Specific domains can be provided or you can use wildcard characters (*) in the subdomain of your allowed referrer. For example https://*.your-app.com will allow the access token to be used on both https://dev.your-app.com and https://your-app.com. While it is also possible to restrict access token use to specific paths (https://your-app.com/page), we do not recommend this method because browsers may remove the path due to privacy concerns.

Usage tracking

All services and content accessed with are tracked. You can monitor the usage of credentials in order to view the consumption of services and the billing amount.

The steps to monitor usage vary based on the type of the credentials were created with:

developers use their to monitor service usage. To monitor service usage of , use the following steps:

  1. Go to location.arcgis.com and sign in with an .

  2. Click My dashboard > Usage > Developer credentials.

  3. In the left sidebar, select the item you would like to review usage for.

  4. In the Billing cycle selector, choose a billing cycle to inspect. The main panel of the window will show a usage report.

    Billing cycle selector
  5. Review the usage report for your . Usage information is organized by . Click Download CSV to download the information as a .csv file.

    OAuth credentials usage report
  6. Click the dropdown button on a specific service to view a usage timeline. The panel will show the resource consumption for each day of the billing cycle.

    Credentials usage timeline

Your browser is no longer supported. Please upgrade your browser for the best experience. See our browser deprecation post for more details.

You can no longer sign into this site. Go to your ArcGIS portal or the ArcGIS Location Platform dashboard to perform management tasks.

Your ArcGIS portal

Create, manage, and access API keys and OAuth 2.0 developer credentials, hosted layers, and data services.

Your ArcGIS Location Platform dashboard

Manage billing, monitor service usage, and access additional resources.

Learn more about these changes in the What's new in Esri Developers June 2024 blog post.

Close