3

I was looking into installing Sitecore 9.1 and was reviewing the modules compatibility table for XP (https://kb.sitecore.net/articles/541788) and was surprised to see no support for Active Directory modules. That would be a deal breaker for us. Did they replace it with something else to allow you to configure connectivity with Active Directory? Please and thank you.

Improve this question
1
  • I reached out to Sitecore shortly after 9.1 was released and asked about just this very thing. At this time they have no production ready support for using Active Directory. There is something in the works but nothing published officially.
    – Michael West
    Feb 15, 2019 at 2:39

2 Answers 2

Reset to default
2

Sitecore 9.1 uses an Identity server to handle logins instead of the old methods.

"With federated authentication now in widespread use across the industry, Sitecore finally provides user authentication and authorization through a centralized federation service. Built and run as a separate application, Identity replaces the traditional Sitecore login process, and provides federated authentication options and single-sign services in one portal."
9.1 sitecore updates
Sitecore 9.1 Identity Server

Improve this answer
1
  • 7
    It would be good to potentially show how you would connect Active Directory to Sitecore 9.1 using Identity Server
    – Pete Navarra ♦
    Feb 14, 2019 at 21:37
1

Sitecore Experience Platform 9.1.0 or later does not support the Sitecore Active Directory module. You can use the Sitecore Identity server as a federation gateway to let users log in to Sitecore through an external provider. Below are the steps to integrate Azure Active Directory(AD) with the Sitecore identity server. This will enable the user to log in to Sitecore via organizations credentials using SSO.

Azure AD set up

  • Go to the Azure portal and look for the Active Directory module and create a new tenant by providing the organization name and domain.
  • Go to your directory and click on ‘App registration’ then click on ‘New Registration’. Give this app a name and select the tenant we have created and give Sitecore identity server URL (append /signin-oidc) in ‘Redirect URI’ field.

enter image description here enter image description here

  • Note down the Client ID and tenant ID. You’ll need these when configuring Sitecore Identity.
  • Go to the Manifest tab and edit groupMembershipClaims setting to SecurityGroup. enter image description here

Setup Sitecore Identity

  • Navigate to the identity server instance and go to this path \sitecore\Sitecore.Plugin.IdentityProvider.AzureAd\Config.
  • Open Sitecore.Plugin.IdentityProvider.AzureAd.xml for edit. You can change the display name. Give the values of client ID and Tenant ID which we noted down from Azure AD. Don’t forget to change Enabled to true.

enter image description here

  • Restart the Sitecore identity server and try to login to CMS. You should see the below screen.

enter image description here

  • Click on the Azure AD button and it will take you to the Microsoft sign-in (organization SSO) page. Since we did not map any user (who will be authorized to log in ), we will not be able to log in. To do that you'll need to map the AD users with Sitecore.

Reger to my blog to see this implementation in detail: https://sitecorewithraman.wordpress.com/2021/01/01/sitecore-cms-azure-ad-integration/

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.