Bug
The RelayState cookie is being set when performing an SP-initiated login in an app (example: CityWorks and My Esri) that uses the ArcGIS Enterprise portal to authenticate users when Okta is the IdP and causes an IdP-initiated login to another resource that uses the cookie (like the ArcGIS Enterprise portal or ArcGIS Online) to reroute to the resource where the SP-initiated login is generated.
| Bug ID Number | BUG-000129499 |
|---|---|
| Submitted | March 19, 2020 |
| Last Modified | March 21, 2025 |
| Applies to | ArcGIS Online |
| Version found | 7.4 |
| Operating System | Windows OS |
| Operating System Version | 2016 64 Bit |
| Status | Will Not Be Addressed |
Additional Information
The development team has considered the issue or request and concluded it will not be addressed. If this is still a concern, contact Esri Support Services.Workaround
- Add the EditThisCookie chrome extension.
- Block the RelayState cookie by adding a rule for the following information using the extension:
- Domain: organizationName.maps.arcgis.com
- Name: RelayState
- Value: any
- Clear cache and perform workflow again to be routed to ArcGIS Online instead of My Esri.
Steps to Reproduce
Bug ID: BUG-000129499
Software:
- ArcGIS Online
Get notified when the status of a bug changes
Discover more on this topic
Search for related information
Find training related to this topic
Explore ideas and give feedback
Get help from ArcGIS experts
Download the Esri Support App