When a web map contains two ArcGIS Server services from the same domain with different web adaptors, one with no security configuration and one with an Integrated Windows Authentication (IWA) security and is consumed in Operations Dashboard, Operations Dashboard fails to prompt for an IWA authentication.
When trying to open http://ess.maps.arcgis.com/apps/opsdashboard/index.html#/a647225f15f442de9a38f70a57d78674 (in Chrome), I was prompted to enter credentials.
解决办法
Adding a *.arcgis.com CORS header to the web server hosting the web adaptor resolves this issue.