When using Web AppBuilder for ArcGIS Developers Edition 1.2 with Portal for ArcGIS and ArcGIS for Server 10.3.1, both secured with Integrated Windows Authentication (IWA) on separate machines and not federated, a query from the query widget with a response number of features over a certain size will fail, returning the error “401 unauthorized” as it switches the GET request to a POST request and it is passed through the proxy. The failure is due to the fact that this request is passed through a proxy that is unable to authenticate against the ArcGIS Server secured at the web tier with IWA.

Workaround

1) Pass the username, password, and domain in the proxy. config of a Microsoft .Net proxy to allow authentication for users to avoid the error “401 unauthorized."

2) Modify proxy.ashx to automatically pull and pass Windows authentication.

3) Modify ‘/jimu.js/main.js’ of the application code to add the prefix of the requesting ArcGIS for Server REST URL to Cross Origin Resource Sharing (CORS) enabled servers so that the request is never sent in the first place:

// path for service from web-tier (IWA/PKI/LDAP) ArcGIS Server

// <machine_name> is the associated

window.esri.config.defaults.io.corsEnabledServers.push({

host: "<machine_name>.<domain>",

withCredentials: true

});

Steps to Reproduce