Invalid token error received when adding ArcGIS Online hosted feature services to the ArcGIS Pro project

Description

When adding ArcGIS Online hosted feature services to an ArcGIS Pro project, "error 499: Invalid token" is received.

This problem may occur even though the user is signed into ArcGIS Online and Pro was functioning correctly on every other host in this organization. Additionally, the issue would be localized to one machine.

The symptoms include:

• ArcGIS Pro is slow to load
• Adding hosted feature services to a new ArcGIS Pro project fail with the error "Authentication Token required (status code 499)"
• Running previously successful scripting/geoprocessing tasks failed with ERROR 160228, "The user does not have permission to execute the operation."

Cause

Using Fiddler to monitor the web traffic between ArcGIS Pro and ArcGIS Online while adding content, it was noted that none of the CRL/OSCP links were accessible - the error was HTTP 502 (bad gateway).

The Certificate Revocation List (CRL) is a list of digital certificates that have been revoked by a Certificate Authority (CA).

The Online Certificate Status Protocol (OCSP) is an Internet protocol used for obtaining the revocation status of an X.509 digital certificate.

Solution or Workaround

Esri recommends enabling the CRL and OCSP protocols through the firewall. This may require the assistance of your firewall vendor.