Questions tagged [authentication]
For questions related to user authentication in the Sitecore client, as well as site membership questions that are specific to Sitecore
85
questions
1
vote
1
answer
129
views
How to prevent multiple sessions from same user
We are using Sitecore 10.1.2
The CMS uses both native & Azure AD logins.
A user is able to login to the CMS in multiple simultaneous sessions/browsers/from different IPs.
Is it possible to prevent ...
- 2,703
1
vote
0
answers
32
views
Restrict login between two websites with same domain [duplicate]
I have two websites www.abc.com/de-de and www.abc.com/es-es . if the user logs into the first website then he is automatically logged into the second website as the domain is same. how can I avoid ...
- 437
0
votes
0
answers
443
views
AuthenticationManager Logout does not trigger external OWIN middleware to logout until subsequent request
We have setup Auth0 as an external identity provider successfully where login works just fine for our public website. The sitecore authoring server uses the default Sitecore Identity Server.
For the ...
- 105
0
votes
0
answers
40
views
Using PKCE authentication in Sitecore 9.2 with .Net framework
We are using Sitecore 9.2 (Identity Server 4). Which is currently not using PKCE authorization(Proof Key for Code Exchange). Our current site is on the .Net framework and I would like to know whether ...
- 286
0
votes
0
answers
166
views
Getting Microsoft.Owin.Security.OAuth.OAuthBearerAuthenticationMiddleware - Authentication failed
While using Azure AD B2C as an external identity provider we are getting Microsoft.Owin.Security.OAuth.OAuthBearerAuthenticationMiddleware - Authentication failed error in our security report. Anyone ...
- 1
2
votes
2
answers
237
views
Migrate existing Owin implementation from pre-Sitecore 9
I am migrating an app from Sitecore 8 to 10. The existing app was built with .Net 4.6.1 and uses Microsoft AspNet Identity and Owin for user access.
The Startup class uses the OwinStartupAttribute ...
- 85
0
votes
0
answers
116
views
Sitecore 10.1 SSC Sitecore Services Client /sitecore/api/ssc/auth/login conflicts with Sitecore Identity Owin pipeline
I'm running Sitecore 10.1 with default, out of the box Sitecore Identity enabled as per Sitecore.Owin.Authentication.config. Auth for regular users into the Content Editor works.
I used to be on ...
- 85
0
votes
2
answers
111
views
Require login headless dotnetcore
I am working on a project that is using Sitecore in headless mode with DotNetCore as the rendering host. It is hosted in Docker containers but I don't think that should matter.
We have a requirement ...
- 1
1
vote
1
answer
124
views
Single Session per user (session revocation)
I am trying to achieve one session per user for content management on XP9.3, understand that there don't seem to be an OOTB solution for this.
So if a user have previously logged in on chrome onto ...
- 13
1
vote
1
answer
300
views
Sitecore services client 403 when login called from different web application
TL;DR: Sitecore services client 403 when login called from a different web application (IIS process), but not when called from Postman
PROBLEM:
RESTful Web API (web service) written in C# running on ...
- 113
2
votes
0
answers
187
views
How to handle two user sessions at the same time in Sitecore
We have a Sitecore MVC website. The Sitecore version is 9.3.0.
As of now, we have a login functionality on the website. We use AuthenticationManager.Login method and pass 3 parameters: username, ...
- 78
1
vote
1
answer
114
views
Get current site in IdentityProvidersProcessor for Federated Login
We have a multisite architecture, and I am working on implementing the federated authentication using Auth0 for visitors login/signup.
I need to fetch separate client id and secret per tenant based on ...
- 387
0
votes
0
answers
161
views
Which Pipeline triggers the Logout when CookieAuthentication expires?
Is there a pipeline that I can hook into, when the CookieAuthentication time, that has been defined in config, expires?
<owin.initialize>
<processor name="CookieAuthentication&...
- 111
1
vote
1
answer
260
views
How to get the Azure AD access token from Sitecore Identity Server after using the Azure AD login and use the token for call to external APIs?
I have a Sitecore 9.2 application and a feature project for Web API . In the API controller classes I need to get the access token issued from Azure AD after using the Azure AD login on my Sitecore ...
- 21
0
votes
0
answers
107
views
How to keep the visitor logged in forever
I'm using Sitecore 10.1 with Commerce 10.1 and working on a requirement to keep the website visitor always logged in (even with browser close & system restarts).
I have used the default SXA login ...
- 2,703
2
votes
0
answers
42
views
Sitecore10 .Net Core Getting Started Template Architecture for Creating Action Methods
I am quite new to Sitecore 10, .Net Core , Docker, so asking this silly question :)
I have followed the Sitecore 10 .Net core getting started template and able to create base setup. Now I understand ...
- 213
4
votes
2
answers
584
views
Virtual user persisting Roles after logout
I am trying to login a virtual user for my application and have assigned roles to this virtual user.
var virtualUser = Sitecore.Security.Authentication.AuthenticationManager.BuildVirtualUser(userName, ...
- 395
3
votes
2
answers
919
views
Authorization issue between Horizon and Content Management
I'm trying to setup Horizon 10.0.1 with Sitecore 10.0.1 on Azure with custom domain (no Content Hub).
I followed all the steps from the Azure PaaS Installation guide.
I use the following host names:
...
- 21.5k
0
votes
0
answers
221
views
Vulnerability Identified: It needs multifactor authentication for login
Vulnerability Identified: It needs multifactor authentication for login.
Is it possible to implement MFA in sitecore 7.5 application.
If yes,what are the ways we can accomplish it? Thanks.
- 1
1
vote
1
answer
265
views
How to get windows logged on user name in Sitecore 9.2 application
I need to get the windows logged on user name in the Sitecore 9.2 application.
I have enabled windows authentication in IIS ,
and tried with the
HttpContext.Current.User.Identity.Name its always ...
- 23
0
votes
0
answers
246
views
AuthenticationManager.Login always returning false on Load balanced Environment
We have created an extranet user in Sitecore CMS to authenticate users in the CD website for the POST method.
Below is the code written for the same.
AuthenticationManager.Login(domain + @"\"...
3
votes
0
answers
146
views
Windows Authentication For Single CD Page
I want to authenticate user based on there windows domain details, for single Sitecore CD server Page.
I Wanted to check if the user is accessing a page through my domain then allow user to login or ...
1
vote
2
answers
745
views
Authenticating with "remember me" not persisting beyond a few hours
I'm using Sitecore 9.1.1 and logging users into the front-end of my site using the AuthenticationManager.Login(domainUser, password, persist) call. By default I'm sending "true" for the persist ...
- 5,082
4
votes
2
answers
633
views
Why Content Delivery in Sitecore 9.3 is treating users as editors?
After upgrading to Sitecore 9.3, some times, users are not able to log in to Content Delivery (using ADFS) because we're exceeding the maximum editor's restriction by license. It's weird because is ...
- 81
2
votes
4
answers
987
views
Virtual login code failing
We used the below code to virtually login the user to the Sitecore version 9.2
Sitecore.Security.Accounts.User virtualUser = AuthenticationManager.BuildVirtualUser("extranet\\user1", true);
...
- 1,936
0
votes
0
answers
45
views
How to pause SignedInArgs, move to a page, then continue OR create a new SignedInArgs to complete the login?
I've created a two-factor page for sitecore login on older sitecore (9.0 and below) by playing with its LoggedInArgs like this:
Check the condition if 2FA needed. If it is, then abort LoggedInArgs
...
- 355
0
votes
0
answers
45
views
Disable form authentication in sitecore 9 [duplicate]
I am using Sitecore federated authentication with azure AD to login to Sitecore. But, I can also use my Sitecore password to log in using form authentication.
Is there any OOB solution to disable ...
- 749
0
votes
0
answers
46
views
Issue while updating and removing users
Sitecore version : 9.0.2
We are using AD authentication to authenticate users. When we are creating new users ( AD users), they are getting created without any issue.However after creating the users, ...
- 73
0
votes
1
answer
243
views
how to implement login functionality on cd site by using custom sql database? [closed]
We have common user database table for different applications. So we need to implement login functionality only on CD site using external common sql db and for CMS we are using default sitecore user ...
- 521
2
votes
0
answers
478
views
Claims are not mapped and users are not persisted using Federated authentication
I'm using sitecore 9.1. I've implemented an IdentityProvidersProcessor using Microsoft.Owin.Security to authenticate users. I've added my transformations in a config file as below.
<!--list of ...
- 649
4
votes
1
answer
1k
views
PostLogoutRedirectUri with Owin and Azure ADb2C
Can anyone confirm if the Sitecore.Security.Authentication.AuthenticationManager.Logout();
handles the logout from AdB2c IDP as well, as per documentation from at:
https://doc.sitecore.com/...
- 1,645
1
vote
0
answers
610
views
Custom Login Page redirects to Sitecore default Login Page
I tried setting up a <site> element on my Project layer with parameters requiredLogin="true" loginPage="/Login" domain="extranet"
I also have granted these items with Read access:
sitecore/...
- 357
2
votes
0
answers
521
views
Virtual User is not persisted in federated authentication
We are integrating identity server authentication using Owin to a Sitecore 6.6 MVC application.
After successful authentication Im trying to login a Sitecore virtual user which seems not persisted to ...
- 397
1
vote
0
answers
73
views
How does a virtual user differ from a user authenticated using a custom membership provider?
Just wondering, what is the difference between a Sitecore virtual user and a user authenticated using a custom membership provider(and respective custom profile and role provider)?
I have been ...
- 397
0
votes
1
answer
534
views
In JSS how do I support both secure and open GraphQL endpoints?
In my JSS application, how do I support both authenticated (logged in) GraphQL endpoints and in-secure (public/open) GraphQL endpoints?
The example Angular application shows the usage of only one ...
- 1,079
1
vote
1
answer
238
views
How to implement SXA Authentication in selected pages?
I am trying to enable login feature for selected pages in SXA site using existing header and footer components.
There is an existing header component with option like a,b,c. I need to add login ...
- 11
1
vote
1
answer
102
views
End-user login via auth token
We're working on a conversion to Sitecore, and in their current system the client sends out emails with links back to the site. These links contain the user's email and an authentication token, so ...
- 5,082
1
vote
1
answer
321
views
How is authentication LoginPath being overridden?
Sitecore 8.2r170728, MVC 5, and AspNet Identity
We want to require direct links to pages of our site that require a logged in user to redirect to our login page and then return to the originally ...
- 85
1
vote
0
answers
161
views
Single Sign On between Sitecore 9 Application and Microsoft Dynamics Portal With Azure AD B2C
Our application is currently on Sitecore 9.0.2
There are two parts to our Application, one is the Sitecore application, the other part is a Microsoft Dynamics Portal Application
We have a ...
- 520
0
votes
1
answer
376
views
Sitecore 9.0.2 with Azure AD B2C System.ArgumentException: idp claim is missing Parameter name: identity
I am working on Sitecore 9.0.2 with Azure AD B2C for authentication of end users.
My Configurations are as shown below:
<pipelines>
<owin.identityProviders>
<!-- This is the ...
- 520
1
vote
1
answer
493
views
Response headers Error when trying to login to sitecore
I am getting the below exception when trying to login to Sitecore 8.2. I have been trying to setup new environment with Sitecore 8.2. I keep getting redirected to the login page and no error on the UI ...
- 601
0
votes
1
answer
368
views
Can't see the extra login buttons for external identity providers
Basically, that's the first time I'm playing with external identity providers in a federated authentication setup (Sitecore 9.1).
I can't say why but even after configuring everything I need ...
- 2,261
0
votes
1
answer
465
views
Prevent Login Redirect on 403 When an Ajax Call
Using Sitecore 9.1 and SXA 1.8
Does anyone know the best way to force Sitecore to return a legit 403 error when an Ajax call is hitting an API method?
Currently when the following code is thrown ...
- 321
1
vote
2
answers
4k
views
Sitecore redirects to no-access page instead of login page
I have the following site configuration for my Sitecore 9.1 site:
<site name="the-website" patch:after="site[@name='modules_website']"
language="en"
...
...
- 884
0
votes
1
answer
593
views
Access denied page in Sitecore when using requireLogin
Our current site (Sitecore 9.1) configuration looks like this: (simplified for readability)
<site name="the-website" patch:after="site[@name='modules_website']"
language="en"
... ...
- 884
1
vote
0
answers
130
views
Users are authenticated with the Old/Copied session Cookies - Sitecore 7.2 -
How to prevent users from logging in using the old/Copied session cookies. For example, I copy my session cookies and then logout from my website. If I import the old/copied session cookies in another ...
- 373
3
votes
1
answer
2k
views
Azure AD B2C login for endusers
We want to allow our endusers to login to our website using an Azure B2C AD account. I have only been able to find examples of how to add federated authentication for Sitecore accounts
I have added ...
- 884
4
votes
1
answer
257
views
Why is SignInProcessor triggered twice?
I've created a custom pipeline to process the login to sent 2FA token. But somehow the pipeline is triggered twice. It doesn't happen with LoggingInProcessor (Used before Sitecore 9). Anyone know why?
...
- 355
4
votes
2
answers
145
views
Is Virtual user concept available in XM version?
One of the client is having an XM license and they need to implement the virtual user concept of the Sitecore do they need to update the existing licence or this feature is already supported with the ...
- 83
1
vote
2
answers
756
views
How to rework LoggingIn pipelines in Sitecore 9.1?
In Sitecore 8.2, I had pipeline with password complexity check:
public class CheckPassword
{
public void Process(LoggingInArgs args)
{
var validator = new CustomValidator();
...
- 173