Sitecore Federated Authentication on CM server - remove Login form

Question

I am using Sitcore 9 and have implemented federated authentication on CM server.

I need to remove normal login authentication , so that the only way that user can be authenticated is form from third party federated authentication.

Any help?

Answer 1

Currently, this can't be solved without setting up a different loginpage or modifying the out of the box page, as there is no switch in the sourcecode of this page which hides the forms authentication loginbox.

What you can do, is disable the technical functionality, just by following the guidance within this link:

https://doc.sitecore.net/sitecore_experience_platform/developing/developing_with_sitecore/federated_authentication/using_federated_authentication_with_sitecore

This will disable the formsauthentication module and give an error when credentials are submitted.

So your options are:

• disable the forms authentication using the previous link (recommended!)

and choose between the following three options:

• a new login page (en patch all the sites in the node (recommended)
• overwrite the existing loginpage and remove all the forms authentication html
• do nothing and keep broken login functionality

Answer 2

Your question is a little vague, but have you reviewed the Sitecore configuration instructions?

https://doc.sitecore.net/sitecore_experience_platform/developing/developing_with_sitecore/federated_authentication/using_federated_authentication_with_sitecore

Answer 3

You can still achieve it. Very short and simple way of doing it, is by always redirecting user to the federated authentication provider login screen whenever user tries to access Sitecore client application (either using /sitecore or /sitecore/login url) using below processor in httpRequestBegin pipeline.

public class AlwaysRedirectToIDP : HttpRequestProcessor
{
    public override void Process(HttpRequestArgs args)
    {
        if (Context.Site.Name == "login" && !args.HttpContext.User.Identity.IsAuthenticated && HttpContext.Current.Request.UrlReferrer == null)
        {
            HttpContext.Current.GetOwinContext().Authentication.Challenge("xp0.sc.azureAD");
        }
    }
}

I am not saying that this is the best way to achieve it but surely this is the quickest option i can think of right now.