ArcGIS Server web services

An ArcGIS Server web service represents a GIS resource—such as a map, image, or feature class—that is located on an ArcGIS Server site and is made available to client apps such as Map Viewer.

You can add ArcGIS Server web services to ArcGIS Online to use them in apps throughout ArcGIS. How you add a service depends on how you need to use it.

  • If you want to create a reference to an ArcGIS Server web service to make it easier for others to access and discover the service, add the web service as an item. When an ArcGIS Server web service is added as a layer item, you can store layer configurations such as customized pop-ups and styling with the layer item. The layer configuration is used when you add the layer item to a map or scene.
  • You can also add an ArcGIS Server web service directly to Map Viewer, Map Viewer Classic, or Scene Viewer, and configure the service layer within a specific map or scene. You can use the maps and scenes you save with those layer configurations in apps.

Creating items that reference services

To help people discover and use your ArcGIS Server web services in their apps, add them as items to My Content. You can store settings and information on the items, configure the item style and pop-ups, and use these items in maps, apps, and scenes.

When you share the configured items, it allows other people to take advantage of the settings you made and allows them to use the items in their own maps, apps, and scenes.

The following tables show the types of items created for each type of ArcGIS Server web service you add. Note that not all ArcGIS Server web services are supported as items.

When you add the services listed in the following table, ArcGIS Online creates layer items that allow you to visualize the data. Store configuration settings with the item layers, such as styles and pop-ups, making these settings available to anyone who can access the layer.

ArcGIS Server web serviceLayer item

Feature service (map service with feature access enabled)

Feature layer

If you publish the feature service from a nonspatial table, the item is a table layer.

A single layer in a feature service

Feature layer

Image service (cached and dynamic)

Imagery layer

Image service (cached, type LERC)

Elevation layer

Map service (dynamic)

Map image layer

Map service (cached)

Tile layer

A single layer in a map service

Feature layer


Feature layers created from a layer in a map service are always read-only; you cannot enable editing on them.

Stream service*

*Requires ArcGIS GeoEvent Server

Feature layer

The services listed in the following table create items in the organization.

ArcGIS Server web serviceItem type

Geocode service


GeoEnrichment service

Geoenrichment Service

Geometry service

Geometry Service

Geoprocessing service

Geoprocessing service layer

Network Analysis service

Network Analysis Service

The organization administrator can use this to configure a Directions and Routing utility service.

Adding services directly to maps and scenes

You can add web services to Map Viewer (formerly known as Map Viewer Beta), Map Viewer Classic (formerly known as Map Viewer), or Scene Viewer directly using the REST endpoint URL of the service.

When you add ArcGIS Server web services to a map or scene using the service URL, you configure settings for the web service layer within the map or scene. Those settings are stored in and are specific to that individual map or scene. You can add the following to a map or scene using the service URL:

  • Feature service (map service with feature access enabled)
  • Image service, cached or dynamic
  • Image service, cached, type LERC creates an elevation layer in Scene Viewer
  • Map service, cached or dynamic
  • Stream service (Map Viewer Classic only)
  • OGC services
  • A layer from a map service or feature service


If you need to change the URL for an ArcGIS Server web service after it has been saved in a map, you can do that from the layer settings of the web map's item page.

Secure services

ArcGIS Online supports ArcGIS Server authentication, including web-tier authentication such as Integrated Windows Authentication (IWA) and a public key infrastructure (PKI), for adding and accessing secure services. When you add a secure ArcGIS Server web service to a map, you will be prompted for credentials. Credentials are not stored in the map. ArcGIS Online obtains a token for authentication; there is nothing additional you need to do. You should not attempt to append a token to the URL when you add a service to a map.

Map Viewer (formerly known as Map Viewer Beta), Map Viewer Classic (formerly known as Map Viewer), ArcGIS Web AppBuilder, and ArcGIS Configurable Apps support editing feature services secured with web-tier authentication. To take advantage of this support, administrators must configure trusted servers that allow ArcGIS Online to automatically pass through credentials.

When you add a secure ArcGIS Server service as an item in ArcGIS Online, you choose whether to store the credentials necessary to access the service with the layer item. Only built-in ArcGIS Enterprise or built-in ArcGIS Server credentials can be stored with a service. If the credentials are not stored, you may be prompted for credentials when you access the service. If the credentials are stored with the layer item, you won't be prompted. To change credentials after adding the item, you can edit the item details and enter a different user name or password. Storing credentials with the item is only supported for token-based services.

You cannot alter the source URL for items that store credentials to access a secure service.


You must make all services accessible using HTTPS only, which encrypts the information in the service when it is transmitted over the internet. If you own or have privileges to administer secure services with embedded credentials and your secure service's data source is using the HTTP protocol, replace http with https in the URL on the Settings tab of the service item's item page.

User names may be case sensitive depending on how your identity systems are managed.


When you store your credentials for a secure service, the layer item behaves like a proxy, in that all requests to the service go through ArcGIS Online. This proxy adds some delay when accessing the service and is slower than going directly to the service. Slow responses from the proxied server may result in timeouts on the proxy.

When you use secure services, you may want to limit use of these items by limiting the URL or IP addresses that can access them.

Limit usage

You may want to limit usage to control how many times and by whom a secure service is accessed, especially if you the service and the map you use it in are shared with the public. To do this, specify a rate limit and designate the specific referrer URLs or IPs that can access the secure service. See Limit usage of secure services for instructions.