We are having a Multi-lingual site. In Production, Sitecore Login page is accessible for all the sites except the .com (en-US) site.
For en-US site, the user is redirected back to home page when they are trying to access www.oursite.com/sitecore. Thus the necessary configuration is already in place.
<rewrite>
<rules>
<rule name="Root Hit Force HTTPS Redirection" enabled="true" stopProcessing="true">
<match url="^$" ignoreCase="false"/>
<conditions>
<add input="{HTTPS}" pattern="^OFF$"/>
<add input="{HTTP_METHOD}" pattern="GET"/>
</conditions>
<action type="Redirect" url="https://{HTTP_HOST}/" redirectType="Permanent"/>
</rule>
<rule name="Sitecore Login or Admin Force HTTPS Redirection" enabled="true" stopProcessing="true">
<match url="^(sitecore/(login|admin))$"/>
<conditions>
<add input="{HTTPS}" pattern="^OFF$"/>
<add input="{HTTP_METHOD}" pattern="GET"/>
</conditions>
<action type="Redirect" url="https://{HTTP_HOST}/{R:1}" appendQueryString="true" redirectType="Permanent"/>
</rule>
<rule name="Forbidden" enabled="true" stopProcessing="true">
<match url="(.*)"/>
<conditions>
<add input="{HTTPS}" pattern="^OFF$"/>
<add input="{HTTP_METHOD}" pattern="GET"/>
</conditions>
<action type="CustomResponse" statusCode="403" subStatusCode="0"/>
</rule>
</rules>
</rewrite>
Can anyone point me out where exactly we missed?