This guide is for ArcGIS Location Platform, ArcGIS Online, and ArcGIS Enterprise developers implementing authentication in custom applications.
The table below shows the account types you can use and limitations:
ArcGIS Location Platform account ArcGIS Online account ArcGIS Enterprise account ArcGIS Location Services 1 Data services (Item access) 2 Spatial analysis services Portal 3 Portal service 3 Full support Partial support No support ArcGIS accounts:If you don't have an account, go to Get started.
The following resources are secure and require authentication to access:
Portal: A portal is secure and requires users and applications to sign in. All content items in a portal are secure and may require authentication depending on their sharing level.
ArcGIS services: All ArcGIS services hosted in Esri's infrastructure are secure, including location services, spatial analysis services, data services, and the portal service.
ArcGIS Enterprise services: All ArcGIS Enterprise services hosted in your own infrastructure are secure.
Low/No-code applications: Applications built using low/no-code builders are hosted in a portal and secure and may require authentication depending on their sharing level.
ArcGIS tools: All ArcGIS tools are secure, such as ArcGIS Pro, Map Viewer, Scene Viewer.
Subscriber and premium content: Subscriber content is a type of secure item hosted in ArcGIS Living Atlas that requires an ArcGIS Online account. Premium content is a subtype of subscriber content that consumes credits.
The following table provides an overview of the functionality available with each type of authentication:
API key authentication User authentication App authentication ArcGIS Location Services 1 1 1 Data services (Item access) Spatial analysis services 1 1 Portal service (General privileges) Portal service (Admin privileges) Full support Partial support No support TopicTo learn more about the types of authentication, go to Types of authentication.
The privileges required for an access token depend on the resources and functionality required by your application. To view the complete list, go to Privileges.
The cost to access ArcGIS services depends on the type of ArcGIS account you have and the services you use.
If you have an ArcGIS Location Platform account, you are billed in US dollars. To determine the cost of accessing services, go to Pricing. A free tier is available for some services.
If you have an ArcGIS Online account, you are billed in credits. To determine the cost of accessing services, go to Understanding credits .
If you do not see an option for API key credentials in the developer credentials creation menu, your account might not have the correct privileges. If you have an ArcGIS Online account or an ArcGIS Enterprise account, your account needs the following privileges to create and assign authorization to API key credentials:
To get these privileges, ask your organization administrator to create a custom role for developers and assign it to your account. To learn more, go to "Roles" in the ArcGIS Online documentation or the ArcGIS Enterprise documentation.
If you do not see the Privileges or Item access windows when creating developer credentials, your account might not have the correct privileges. If you have an ArcGIS Online account or an ArcGIS Enterprise account, your account needs the privilege to work with developer credentials:
To get this privilege and related developer privileges, ask your organization administrator to create a custom role for developers and assign it to your account. To learn more, go to "Roles" in the ArcGIS Online documentation or the ArcGIS Enterprise documentation.
If a privilege is not available to your developer credentials, it may not be visible for the following reasons:
API key credentials are available for the following account types:
To learn how to create a custom role with the correct privileges for API key authentication, go to Configure member roles in the ArcGIS Online documentation.
Support for API key authentication was added to ArcGIS Enterprise in version 11.4. It is not possible to access ArcGIS Enterprise services with an API key in versions prior to 11.4.
API keys (legacy) are not supported in ArcGIS Enterprise.
ArcGIS Enterprise documentationTo upgrade to the latest version of Enterprise, go to Update ArcGIS Enterprise.
Service usage with API key authentication is billed to the ArcGIS subscription associated with the developer's account. The developer who created the API key credentials, or the organization the developer belongs to, will incur all costs associated with the key.
API key authentication is recommended for public applications and standalone automation scripts. API keys used in public applications should have a limited set of privileges, and have their referrer URLs configured to prevent the key from being stolen.
User authenticationUser authentication requires OAuth credentials, which are available for the following account types:
Service usage with user authentication is individually billed to the ArcGIS subscriptions of each user who signs in to your application. Service usage can still be tracked with the OAuth credentials used to create the application, but all costs will be billed to the organization of users who sign in to the application.
Anyone with an ArcGIS account can sign in to apps that implement user authentication. However, user authentication is typically used for the following account types:
User authentication is used to build private applications that require users to sign in with an ArcGIS account. It can be implemented in any environment, including client-facing applications, server-side applications, and full stack applications.
App authenticationApp authentication requires OAuth credentials, which are available for the following account types:
To learn how to create a custom role with the correct privileges for app authentication, go to Configure member roles in the ArcGIS Online documentation.
Service usage with app authentication is billed to the ArcGIS subscription associated with the developer's account. The developer who created the OAuth credentials, or the organization the developer belongs to, will incur all costs associated with the application.
App authentication is recommended for public applications with a server-side component, or for standalone console scripts. App authentication is more secure than API key authentication, as client credentials are stored securely and never exposed to the client.
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4