BUG-000169722 for ArcGIS GIS Server

Bug ID Number	BUG-000169722
Submitted	August 5, 2024
Last Modified	September 11, 2025
Applies to	ArcGIS GIS Server
Version found	11.1
Operating System	Windows OS
Operating System Version	10.0 64 Bit
Status	As Designed

Additional Information

This is by design. This issue occurs because the Map Viewer app only utilizes CORS requests to access the services. When the service is secured with web-tier authentication (IWA, Basic, client certificate, etc), the CORS request must be sent with credentials. ArcGIS Online only make the CORS requests with credentials for URLs hosted on servers that are included in the 'Trusted servers' list in an organization's security settings. Since viewing the service in ArcGIS Online goes to www.arcgis.com/apps/mapviewer by default, there are no trusted servers so the CORS request will never be sent with credentials. These services are viewable in Map Viewer Classic because they are not accessed with CORS requests.

Workaround

The ArcGIS Online map viewer URL that appears at the top of the REST services directory pages can be adjusted to point to a specific ArcGIS Online organization that has been configured with the ArcGIS Server hostname included in the list of 'Trusted servers'. This allow the services to be viewable in Map Viewer. If an ArcGIS Online organization is not available, the URL can also be adjusted to point to a Portal for ArcGIS where the 'Trusted servers' can be configured. The other option would be to use Map Viewer Classic to view the services.