You can sign in to VertiGIS Studio Search Designer with either ArcGIS Online or Enterprise Portal.
Refresh Tokens
ArcGIS refresh tokens are used to securely obtain new access tokens without requiring the user to re-authenticate. They play a key role in maintaining seamless access to ArcGIS services while minimizing security risks and user friction.
When using VertiGIS Studio Search, it is necessary for an ArcGIS refresh token to be created and periodically renewed to ensure continued access to secured resources. This process initiates automatically and is completed by saving the resource. See below.
You may also modify the default two-week duration of the refresh token. See below.
What ArcGIS Refresh Tokens Do
•Extend session duration: When a user logs in to Studio Search, they receive an access token that allows the app to interact with ArcGIS services. By default, the duration is set to 30 minutes.
•Enable silent re-authentication: Instead of prompting the user to log in again, Studio Search can use the refresh token to request a new access token behind the scenes.
•Preserve authorization scope: The new access token obtained via the refresh token retains the same permissions and duration as the original one.
Why Use Refresh Tokens?
•Security: Access tokens are exchanged with resource servers, while refresh tokens are only exchanged with the authorization server. This separation reduces the risk of long-lived tokens being intercepted or leaked.
•User experience: Studio Search can maintain persistent sessions without repeatedly asking users to sign in.
•Token lifecycle management: Developers can design workflows where access tokens are short-lived (limiting exposure) while refresh tokens are long-lived or revocable, giving more control over session security.
Renew Refresh Tokens
Renew an expired ArcGIS Refresh token:
1.From the Dashboard, open a configured search.
2.Click a configured resource.
3.Save the resource. The saving process triggers the renewing of the refresh token.
Modify the Duration of Refresh Tokens
In VertiGIS Studio Search, there is no direct setting within the Search Designer UI to change the duration of an ArcGIS Refresh Token. This is because the token's lifespan is controlled by your ArcGIS Identity Provider (ArcGIS Enterprise/Portal or ArcGIS Online).
If you are using ArcGIS Online instead of Enterprise, the maximum duration for tokens is strictly capped at 14 days (20,160 minutes) and cannot be extended to 90 days like it can in Enterprise.
To Modify the duration in ArcGIS Enterprise (Portal):
1.Navigate to your Portal's Sharing API: https://webadaptorhost.domain.com/arcgis/sharing/rest
2.Log in as an Administrator.
3.Go to Portals > Self (at the bottom of the child resources list).
4.Scroll to the bottom of the page and click Update.
5.Look for the field Max Token Expiration Minutes.
6.Change the value and click Update Organization.
For full details, see Specify the maximum token expiration time.
