I am using Sitcore 9 and have implemented federated authentication on CM server.
I need to remove normal login authentication , so that the only way that user can be authenticated is form from third party federated authentication.
Any help?
Currently, this can't be solved without setting up a different loginpage or modifying the out of the box page, as there is no switch in the sourcecode of this page which hides the forms authentication loginbox.
What you can do, is disable the technical functionality, just by following the guidance within this link:
This will disable the formsauthentication module and give an error when credentials are submitted.
So your options are:
and choose between the following three options:
Your question is a little vague, but have you reviewed the Sitecore configuration instructions?
You can still achieve it. Very short and simple way of doing it, is by always redirecting user to the federated authentication provider login screen whenever user tries to access Sitecore client application (either using /sitecore
or /sitecore/login
url) using below processor in httpRequestBegin
pipeline.
public class AlwaysRedirectToIDP : HttpRequestProcessor
{
public override void Process(HttpRequestArgs args)
{
if (Context.Site.Name == "login" && !args.HttpContext.User.Identity.IsAuthenticated && HttpContext.Current.Request.UrlReferrer == null)
{
HttpContext.Current.GetOwinContext().Authentication.Challenge("xp0.sc.azureAD");
}
}
}
I am not saying that this is the best way to achieve it but surely this is the quickest option i can think of right now.