ArcGIS Token end point, http://localhost:6080/arcgis/tokens/, generates a token when invalid credentials are supplied, specifically if the credentials supplied are Lightweight Directory Access Protocol (LDAP) User DN.
Last Published: July 1, 2015ArcGIS for Server
Bug ID Number
January 21, 2015
July 28, 2020
ArcGIS for Server
Operating System Version
2012 64 Bit
This issue was not reproducible when tested by the development team. Issues may be given this status when they cannot be reproduced or are no longer relevant in a development version of the software, but a specific fix was not installed to address the issue. The issue's Additional Information section may contain further explanation.
This is expected behavior; A token generated in this scenario is valid but only if the username format matches the RDN attribute.