Unable to add secured feature layers or hosted feature layers in the ArcGIS Enterprise portal

Description

When attempting to add a secured feature layer as a guest in an ArcGIS Enterprise to ArcGIS Enterprise distributed collaboration, the process fails in the web map. Additionally, secured feature layers added by the host are not visible to the guest, whereas secured feature layers added by the guest are visible to the host.

Similarly, when adding a hosted feature layer in the ArcGIS Enterprise Map Viewer, the layer cannot be added.

Both scenarios display the following error message:

Error:
Unable to add layer <Layer_Name>.
Unable to establish a secure HTTPS connection to the layer. The layer, <Layer_Name>, cannot be added to the map.

Cause

• The allowedProxyHosts property of the guest's portal does not include the host's domain URL.
• The serverURL property is generated incorrectly in the ArcGIS Server Administrator Directory. This issue occurrs when ArcGIS Server is initially federated with the ArcGIS Enterprise portal.

Solution or Workaround

Add the host's domain URL to the guest's allowedProxyHosts property in the ArcGIS Portal Administrator Directory

In the guest's ArcGIS Portal Administrator Directory, add the host's domain URL to the allowedProxyHosts property. Refer to Portal for ArcGIS: Restrict the portal's proxy capability for instructions.

Remove the incorrectly generated section of the URL from the ArcGIS Server Administrator Directory

1. Log in to the ArcGIS Server Administrator Directory. Refer to ArcGIS Server: Introduction to the ArcGIS Server Administrator Directory for additional information.
2. On the Site Root - / page, for Resources, click security.
3. On the Security page, for Resources, click config.
4. Navigate to Supported Operations and click update.
5. Under Portal properties, update the portalUrl and serverUrl properties to include an FQDN and the web adaptor name. An example of the updated URL is as follows:

https://<Machine_Name>.<Domain_Name>.com/<WebAdaptor_Name>

Note:
If the portalUrl and the serverUrl properties include '/rest/service' in the URL, remove '/rest/service' from the URL.

6. Click Update.