laptop and a wrench

Bug

In ArcGIS Online, a hosted feature service added with stored credentials to the Integrated Windows Authentication (IWA) Portal for ArcGIS returns the error message, "The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'" when accessed from another domain.

Last Published: May 18, 2022 Portal for ArcGIS
Bug ID Number BUG-000114261
SubmittedMay 25, 2018
Last ModifiedJuly 31, 2025
Applies toPortal for ArcGIS
Version found10.6
Operating SystemN/A
Operating System VersionN/A
StatusIn Review

Steps to Reproduce

Bug ID: BUG-000114261

Software:

  • Portal for ArcGIS

Get notified when the status of a bug changes

Download the Esri Support App

Discover more on this topic

Get help from ArcGIS experts

Contact technical support

Download the Esri Support App

Go to download options