Questions tagged [authentication]

For questions related to user authentication in the Sitecore client, as well as site membership questions that are specific to Sitecore

Filter by
Sorted by
Tagged with
1 vote
3 answers
93 views

AuthorizationFilterAttribute OnAuthorization method is not firing in Sitecore 10

Authorization filter attribute is not firing public class AuthenticationRequiredAttribute : System.Web.Http.Filters.AuthorizationFilterAttribute { public override bool AllowMultiple ...
Himanshu Agarwal's user avatar
0 votes
1 answer
33 views

Sitecore 10.3.1 - Could not find property 'clearroleswhensignin' on object of type: Sitecore.Owin.Authentication.Configuration.DefaultIdentityProvider [closed]

In the process of upgrading to Sitecore XP 10.3.1 from 10.2 I got this error after deploying our code. We use a custom identityprovider that has the property set.
sitecorepm's user avatar
0 votes
1 answer
162 views

Unable to login virtual user from sitecore when identity server is enabled

I am setting up sitecore identity server to pass through authentication to Okta for some of our portals. However some of our portals already have a manual authentication approach taken which logs in ...
Matthew Pigram's user avatar
0 votes
1 answer
58 views

Sitecore XM Cloud Error: User is locked out

I am using XMCloud on my local docker instance, but it locked my user after entering my cloud logins multiple times (by mistake). now when I am running my local URL to log into Sitecore it shows an ...
Mahendra Shekhawat's user avatar
0 votes
1 answer
22 views

Not able to register user using external login(google) using oauth apis

I am facing an issue with External login using google. We have login using google feature on the website I have used this blog to implement google login. I am able to redirect the user to gmail on ...
Himanshu Agarwal's user avatar
0 votes
2 answers
49 views

How to logout specific security domain virtual user from sitecore

I am creating virtual user for site 1 using below code AuthenticationManager.BuildVirtualUser("site1\\"+Email, true); for site 2 using below code AuthenticationManager.BuildVirtualUser(&...
shahul's user avatar
  • 47
1 vote
1 answer
63 views

How can create site specific virtual user for multi site implementation in Sitecore

Currently we are creating virtual user in Sitecore (9.0.2) database once user is authenticated with backend API as shown below Sitecore.Security.Authentication.AuthenticationManager.BuildVirtualUser(&...
shahul's user avatar
  • 47
1 vote
1 answer
418 views

How to prevent multiple sessions from same user

We are using Sitecore 10.1.2 The CMS uses both native & Azure AD logins. A user is able to login to the CMS in multiple simultaneous sessions/browsers/from different IPs. Is it possible to prevent ...
sukesh's user avatar
  • 3,033
1 vote
0 answers
33 views

Restrict login between two websites with same domain [duplicate]

I have two websites www.abc.com/de-de and www.abc.com/es-es . if the user logs into the first website then he is automatically logged into the second website as the domain is same. how can I avoid ...
Himanshu Agarwal's user avatar
0 votes
0 answers
715 views

AuthenticationManager Logout does not trigger external OWIN middleware to logout until subsequent request

We have setup Auth0 as an external identity provider successfully where login works just fine for our public website. The sitecore authoring server uses the default Sitecore Identity Server. For the ...
Dejan Vasic's user avatar
0 votes
0 answers
51 views

Using PKCE authentication in Sitecore 9.2 with .Net framework

We are using Sitecore 9.2 (Identity Server 4). Which is currently not using PKCE authorization(Proof Key for Code Exchange). Our current site is on the .Net framework and I would like to know whether ...
Sarthak Gupta's user avatar
1 vote
0 answers
356 views

Getting Microsoft.Owin.Security.OAuth.OAuthBearerAuthenticationMiddleware - Authentication failed

While using Azure AD B2C as an external identity provider we are getting Microsoft.Owin.Security.OAuth.OAuthBearerAuthenticationMiddleware - Authentication failed error in our security report. Anyone ...
Adarsh's user avatar
  • 11
2 votes
2 answers
345 views

Migrate existing Owin implementation from pre-Sitecore 9

I am migrating an app from Sitecore 8 to 10. The existing app was built with .Net 4.6.1 and uses Microsoft AspNet Identity and Owin for user access. The Startup class uses the OwinStartupAttribute ...
fgantt's user avatar
  • 85
0 votes
2 answers
144 views

Require login headless dotnetcore

I am working on a project that is using Sitecore in headless mode with DotNetCore as the rendering host. It is hosted in Docker containers but I don't think that should matter. We have a requirement ...
Luke's user avatar
  • 1
1 vote
1 answer
200 views

Single Session per user (session revocation)

I am trying to achieve one session per user for content management on XP9.3, understand that there don't seem to be an OOTB solution for this. So if a user have previously logged in on chrome onto ...
meanmean's user avatar
1 vote
1 answer
450 views

Sitecore services client 403 when login called from different web application

TL;DR: Sitecore services client 403 when login called from a different web application (IIS process), but not when called from Postman PROBLEM: RESTful Web API (web service) written in C# running on ...
T H's user avatar
  • 123
2 votes
0 answers
249 views

How to handle two user sessions at the same time in Sitecore

We have a Sitecore MVC website. The Sitecore version is 9.3.0. As of now, we have a login functionality on the website. We use AuthenticationManager.Login method and pass 3 parameters: username, ...
Thanoj's user avatar
  • 88
1 vote
1 answer
135 views

Get current site in IdentityProvidersProcessor for Federated Login

We have a multisite architecture, and I am working on implementing the federated authentication using Auth0 for visitors login/signup. I need to fetch separate client id and secret per tenant based on ...
manaslu's user avatar
  • 397
0 votes
0 answers
196 views

Which Pipeline triggers the Logout when CookieAuthentication expires?

Is there a pipeline that I can hook into, when the CookieAuthentication time, that has been defined in config, expires? <owin.initialize> <processor name="CookieAuthentication&...
Nadine Lendzian's user avatar
1 vote
1 answer
329 views

How to get the Azure AD access token from Sitecore Identity Server after using the Azure AD login and use the token for call to external APIs?

I have a Sitecore 9.2 application and a feature project for Web API . In the API controller classes I need to get the access token issued from Azure AD after using the Azure AD login on my Sitecore ...
Nidhi Sinha's user avatar
0 votes
0 answers
131 views

How to keep the visitor logged in forever

I'm using Sitecore 10.1 with Commerce 10.1 and working on a requirement to keep the website visitor always logged in (even with browser close & system restarts). I have used the default SXA login ...
sukesh's user avatar
  • 3,033
2 votes
0 answers
46 views

Sitecore10 .Net Core Getting Started Template Architecture for Creating Action Methods

I am quite new to Sitecore 10, .Net Core , Docker, so asking this silly question :) I have followed the Sitecore 10 .Net core getting started template and able to create base setup. Now I understand ...
Sachin Dabas's user avatar
5 votes
2 answers
737 views

Virtual user persisting Roles after logout

I am trying to login a virtual user for my application and have assigned roles to this virtual user. var virtualUser = Sitecore.Security.Authentication.AuthenticationManager.BuildVirtualUser(userName, ...
Shaurya's user avatar
  • 437
3 votes
2 answers
1k views

Authorization issue between Horizon and Content Management

I'm trying to setup Horizon 10.0.1 with Sitecore 10.0.1 on Azure with custom domain (no Content Hub). I followed all the steps from the Azure PaaS Installation guide. I use the following host names: ...
Marek Musielak's user avatar
  • 23.1k
0 votes
0 answers
290 views

Vulnerability Identified: It needs multifactor authentication for login

Vulnerability Identified: It needs multifactor authentication for login. Is it possible to implement MFA in sitecore 7.5 application. If yes,what are the ways we can accomplish it? Thanks.
Sophie's user avatar
  • 31
1 vote
1 answer
412 views

How to get windows logged on user name in Sitecore 9.2 application

I need to get the windows logged on user name in the Sitecore 9.2 application. I have enabled windows authentication in IIS , and tried with the HttpContext.Current.User.Identity.Name its always ...
Mahesh's user avatar
  • 23
0 votes
0 answers
284 views

AuthenticationManager.Login always returning false on Load balanced Environment

We have created an extranet user in Sitecore CMS to authenticate users in the CD website for the POST method. Below is the code written for the same. AuthenticationManager.Login(domain + @"\"...
Jitendra Ghanekar's user avatar
3 votes
0 answers
157 views

Windows Authentication For Single CD Page

I want to authenticate user based on there windows domain details, for single Sitecore CD server Page. I Wanted to check if the user is accessing a page through my domain then allow user to login or ...
Hemant Ratnaparkhi's user avatar
1 vote
2 answers
937 views

Authenticating with "remember me" not persisting beyond a few hours

I'm using Sitecore 9.1.1 and logging users into the front-end of my site using the AuthenticationManager.Login(domainUser, password, persist) call. By default I'm sending "true" for the persist ...
Ken McAndrew's user avatar
  • 5,092
4 votes
2 answers
690 views

Why Content Delivery in Sitecore 9.3 is treating users as editors?

After upgrading to Sitecore 9.3, some times, users are not able to log in to Content Delivery (using ADFS) because we're exceeding the maximum editor's restriction by license. It's weird because is ...
Johnny Lopez's user avatar
2 votes
4 answers
1k views

Virtual login code failing

We used the below code to virtually login the user to the Sitecore version 9.2 Sitecore.Security.Accounts.User virtualUser = AuthenticationManager.BuildVirtualUser("extranet\\user1", true); ...
Gobinath Saminathan's user avatar
0 votes
0 answers
47 views

How to pause SignedInArgs, move to a page, then continue OR create a new SignedInArgs to complete the login?

I've created a two-factor page for sitecore login on older sitecore (9.0 and below) by playing with its LoggedInArgs like this: Check the condition if 2FA needed. If it is, then abort LoggedInArgs ...
purnadika's user avatar
  • 367
0 votes
0 answers
45 views

Disable form authentication in sitecore 9 [duplicate]

I am using Sitecore federated authentication with azure AD to login to Sitecore. But, I can also use my Sitecore password to log in using form authentication. Is there any OOB solution to disable ...
rdhaundiyal's user avatar
0 votes
0 answers
46 views

Issue while updating and removing users

Sitecore version : 9.0.2 We are using AD authentication to authenticate users. When we are creating new users ( AD users), they are getting created without any issue.However after creating the users, ...
Vishal's user avatar
  • 73
0 votes
1 answer
294 views

how to implement login functionality on cd site by using custom sql database? [closed]

We have common user database table for different applications. So we need to implement login functionality only on CD site using external common sql db and for CMS we are using default sitecore user ...
ganesh's user avatar
  • 521
2 votes
0 answers
510 views

Claims are not mapped and users are not persisted using Federated authentication

I'm using sitecore 9.1. I've implemented an IdentityProvidersProcessor using Microsoft.Owin.Security to authenticate users. I've added my transformations in a config file as below. <!--list of ...
AME's user avatar
  • 669
4 votes
1 answer
1k views

PostLogoutRedirectUri with Owin and Azure ADb2C

Can anyone confirm if the Sitecore.Security.Authentication.AuthenticationManager.Logout(); handles the logout from AdB2c IDP as well, as per documentation from at: https://doc.sitecore.com/...
Abhay Dhar's user avatar
  • 1,655
1 vote
0 answers
653 views

Custom Login Page redirects to Sitecore default Login Page

I tried setting up a <site> element on my Project layer with parameters requiredLogin="true" loginPage="/Login" domain="extranet" I also have granted these items with Read access: sitecore/...
Lala's user avatar
  • 377
2 votes
0 answers
564 views

Virtual User is not persisted in federated authentication

We are integrating identity server authentication using Owin to a Sitecore 6.6 MVC application. After successful authentication Im trying to login a Sitecore virtual user which seems not persisted to ...
nari447's user avatar
  • 407
1 vote
0 answers
76 views

How does a virtual user differ from a user authenticated using a custom membership provider?

Just wondering, what is the difference between a Sitecore virtual user and a user authenticated using a custom membership provider(and respective custom profile and role provider)? I have been ...
nari447's user avatar
  • 407
0 votes
1 answer
614 views

In JSS how do I support both secure and open GraphQL endpoints?

In my JSS application, how do I support both authenticated (logged in) GraphQL endpoints and in-secure (public/open) GraphQL endpoints? The example Angular application shows the usage of only one ...
TomT's user avatar
  • 1,079
1 vote
1 answer
265 views

How to implement SXA Authentication in selected pages?

I am trying to enable login feature for selected pages in SXA site using existing header and footer components. There is an existing header component with option like a,b,c. I need to add login ...
Newbie's user avatar
  • 11
1 vote
1 answer
113 views

End-user login via auth token

We're working on a conversion to Sitecore, and in their current system the client sends out emails with links back to the site. These links contain the user's email and an authentication token, so ...
Ken McAndrew's user avatar
  • 5,092
1 vote
1 answer
395 views

How is authentication LoginPath being overridden?

Sitecore 8.2r170728, MVC 5, and AspNet Identity We want to require direct links to pages of our site that require a logged in user to redirect to our login page and then return to the originally ...
fgantt's user avatar
  • 85
1 vote
0 answers
168 views

Single Sign On between Sitecore 9 Application and Microsoft Dynamics Portal With Azure AD B2C

Our application is currently on Sitecore 9.0.2 There are two parts to our Application, one is the Sitecore application, the other part is a Microsoft Dynamics Portal Application We have a ...
SitecoreNoob's user avatar
0 votes
1 answer
396 views

Sitecore 9.0.2 with Azure AD B2C System.ArgumentException: idp claim is missing Parameter name: identity

I am working on Sitecore 9.0.2 with Azure AD B2C for authentication of end users. My Configurations are as shown below: <pipelines> <owin.identityProviders> <!-- This is the ...
SitecoreNoob's user avatar
1 vote
1 answer
608 views

Response headers Error when trying to login to sitecore

I am getting the below exception when trying to login to Sitecore 8.2. I have been trying to setup new environment with Sitecore 8.2. I keep getting redirected to the login page and no error on the UI ...
Arun Kumar's user avatar
0 votes
1 answer
426 views

Can't see the extra login buttons for external identity providers

Basically, that's the first time I'm playing with external identity providers in a federated authentication setup (Sitecore 9.1). I can't say why but even after configuring everything I need ...
Hugo Santos's user avatar
  • 2,281
0 votes
1 answer
499 views

Prevent Login Redirect on 403 When an Ajax Call

Using Sitecore 9.1 and SXA 1.8 Does anyone know the best way to force Sitecore to return a legit 403 error when an Ajax call is hitting an API method? Currently when the following code is thrown ...
Colema18's user avatar
  • 321
1 vote
2 answers
4k views

Sitecore redirects to no-access page instead of login page

I have the following site configuration for my Sitecore 9.1 site: <site name="the-website" patch:after="site[@name='modules_website']" language="en" ... ...
Hos's user avatar
  • 884