IBM Maximo Spatial and IBM Maximo Mobile both use OAuth 2.0 to authenticate with Esri ArcGIS services. The client_id and client_secret are configured on the IBM Manage server, enabling secure communication between it and Esri ArcGIS servers. The token generation process happens exclusively on the IBM Manage server, ensuring that credentials are never transferred to client applications. Short-lived access tokens are used to authenticate requests to ArcGIS services, ensuring secure, token-based integration.

An administrator registers the IBM Maximo application with Esri ArcGIS to obtain the necessary credentials. These credentials are then configured in the Maximo Spatial Map Manager application, allowing the server to generate and manage tokens. This setup ensures that communication between Maximo and ArcGIS remains secure. Credentials are kept safe on the server, away from the client-side applications like IBM Maximo Mobile or any browser based application.

OAuth 2.0 provides multiple layers of security. Only authorized services are accessed and tokens expire regularly, minimizing potential security risks. This approach also supports the scalability and flexibility required in enterprise environments that manage complex spatial data.

For more technical details on OAuth 2.0 integration with ArcGIS, you can refer to the ArcGIS app authentication documentation.