We are building a site that needs to support multiple ways of logging in:
- Forms authentication using Sitecore's built-in user database. Users belong to the extranet domain. This part is already implemented and working fine.
- Federated OWIN authentication against a 3rd party service that is fairly similar to Azure AD
Content access depending on method of authentication
Much of the website will be available to anonymous users.
Forms authentication will give users access to a few more pages (user dashboard etc.) plus additional features on the public pages.
Federated authentication will in addition to the above allow access to a secure part of the website.
We need to be able to save profile settings for both types of users in Sitecore. I suppose this means that we shouldn't use virtual users.
Our code solution uses the Helix architecture.
I am looking for general pointers on how to go about setting this up, both in terms of what to do on a Controller level and in terms of Sitecore security roles etc. Should we create a new domain for the federated users? If so, can we configure the site to support multiple domains on the same pages? Is this done by creating multiple site entries with the same rootPath in the Sitecore config file?