FAQ: Why are secured services added to ArcGIS Online with stored credentials remapped to utility.arcgis.com?
Why are secured services added to ArcGIS Online with stored credentials remapped to utility.arcgis.com?
Secured web services provided by ArcGIS for Server and hosted services may be added as items to www.arcgis.com. If the option to store user login credentials is selected when adding an item, the item URL is updated to reference utility.arcgis.com.
When secured service credentials are stored with the item on www.arcgis.com, a proxy application is leveraged on the utility.arcgis.com server cluster. This proxy assists with dynamically generating a short lived token to allow user access to the secured resource without the need to interactively pass user credentials.