Questions tagged [authentication]
For questions related to user authentication in the Sitecore client, as well as site membership questions that are specific to Sitecore
91
questions
1
vote
3
answers
93
views
AuthorizationFilterAttribute OnAuthorization method is not firing in Sitecore 10
Authorization filter attribute is not firing
public class AuthenticationRequiredAttribute : System.Web.Http.Filters.AuthorizationFilterAttribute
{
public override bool AllowMultiple
...
- 447
0
votes
1
answer
33
views
Sitecore 10.3.1 - Could not find property 'clearroleswhensignin' on object of type: Sitecore.Owin.Authentication.Configuration.DefaultIdentityProvider [closed]
In the process of upgrading to Sitecore XP 10.3.1 from 10.2 I got this error after deploying our code.
We use a custom identityprovider that has the property set.
- 113
0
votes
1
answer
162
views
Unable to login virtual user from sitecore when identity server is enabled
I am setting up sitecore identity server to pass through authentication to Okta for some of our portals. However some of our portals already have a manual authentication approach taken which logs in ...
- 107
0
votes
1
answer
58
views
Sitecore XM Cloud Error: User is locked out
I am using XMCloud on my local docker instance, but it locked my user after entering my cloud logins multiple times (by mistake). now when I am running my local URL to log into Sitecore it shows an ...
- 5,168
0
votes
1
answer
22
views
Not able to register user using external login(google) using oauth apis
I am facing an issue with External login using google. We have login using google feature on the website
I have used this blog to implement google login. I am able to redirect the user to gmail on ...
- 447
0
votes
2
answers
49
views
How to logout specific security domain virtual user from sitecore
I am creating virtual user for site 1 using below code
AuthenticationManager.BuildVirtualUser("site1\\"+Email, true);
for site 2 using below code
AuthenticationManager.BuildVirtualUser(&...
- 47
1
vote
1
answer
63
views
How can create site specific virtual user for multi site implementation in Sitecore
Currently we are creating virtual user in Sitecore (9.0.2) database once user is authenticated with backend API as shown below
Sitecore.Security.Authentication.AuthenticationManager.BuildVirtualUser(&...
- 47
1
vote
1
answer
418
views
How to prevent multiple sessions from same user
We are using Sitecore 10.1.2
The CMS uses both native & Azure AD logins.
A user is able to login to the CMS in multiple simultaneous sessions/browsers/from different IPs.
Is it possible to prevent ...
- 3,033
1
vote
0
answers
33
views
Restrict login between two websites with same domain [duplicate]
I have two websites www.abc.com/de-de and www.abc.com/es-es . if the user logs into the first website then he is automatically logged into the second website as the domain is same. how can I avoid ...
- 447
0
votes
0
answers
715
views
AuthenticationManager Logout does not trigger external OWIN middleware to logout until subsequent request
We have setup Auth0 as an external identity provider successfully where login works just fine for our public website. The sitecore authoring server uses the default Sitecore Identity Server.
For the ...
- 105
0
votes
0
answers
51
views
Using PKCE authentication in Sitecore 9.2 with .Net framework
We are using Sitecore 9.2 (Identity Server 4). Which is currently not using PKCE authorization(Proof Key for Code Exchange). Our current site is on the .Net framework and I would like to know whether ...
- 336
1
vote
0
answers
356
views
Getting Microsoft.Owin.Security.OAuth.OAuthBearerAuthenticationMiddleware - Authentication failed
While using Azure AD B2C as an external identity provider we are getting Microsoft.Owin.Security.OAuth.OAuthBearerAuthenticationMiddleware - Authentication failed error in our security report. Anyone ...
- 11
2
votes
2
answers
345
views
Migrate existing Owin implementation from pre-Sitecore 9
I am migrating an app from Sitecore 8 to 10. The existing app was built with .Net 4.6.1 and uses Microsoft AspNet Identity and Owin for user access.
The Startup class uses the OwinStartupAttribute ...
- 85
0
votes
2
answers
144
views
Require login headless dotnetcore
I am working on a project that is using Sitecore in headless mode with DotNetCore as the rendering host. It is hosted in Docker containers but I don't think that should matter.
We have a requirement ...
- 1
1
vote
1
answer
200
views
Single Session per user (session revocation)
I am trying to achieve one session per user for content management on XP9.3, understand that there don't seem to be an OOTB solution for this.
So if a user have previously logged in on chrome onto ...
- 13
1
vote
1
answer
450
views
Sitecore services client 403 when login called from different web application
TL;DR: Sitecore services client 403 when login called from a different web application (IIS process), but not when called from Postman
PROBLEM:
RESTful Web API (web service) written in C# running on ...
- 123
2
votes
0
answers
249
views
How to handle two user sessions at the same time in Sitecore
We have a Sitecore MVC website. The Sitecore version is 9.3.0.
As of now, we have a login functionality on the website. We use AuthenticationManager.Login method and pass 3 parameters: username, ...
- 88
1
vote
1
answer
135
views
Get current site in IdentityProvidersProcessor for Federated Login
We have a multisite architecture, and I am working on implementing the federated authentication using Auth0 for visitors login/signup.
I need to fetch separate client id and secret per tenant based on ...
- 397
0
votes
0
answers
196
views
Which Pipeline triggers the Logout when CookieAuthentication expires?
Is there a pipeline that I can hook into, when the CookieAuthentication time, that has been defined in config, expires?
<owin.initialize>
<processor name="CookieAuthentication&...
- 111
1
vote
1
answer
329
views
How to get the Azure AD access token from Sitecore Identity Server after using the Azure AD login and use the token for call to external APIs?
I have a Sitecore 9.2 application and a feature project for Web API . In the API controller classes I need to get the access token issued from Azure AD after using the Azure AD login on my Sitecore ...
- 21
0
votes
0
answers
131
views
How to keep the visitor logged in forever
I'm using Sitecore 10.1 with Commerce 10.1 and working on a requirement to keep the website visitor always logged in (even with browser close & system restarts).
I have used the default SXA login ...
- 3,033
2
votes
0
answers
46
views
Sitecore10 .Net Core Getting Started Template Architecture for Creating Action Methods
I am quite new to Sitecore 10, .Net Core , Docker, so asking this silly question :)
I have followed the Sitecore 10 .Net core getting started template and able to create base setup. Now I understand ...
- 223
5
votes
2
answers
737
views
Virtual user persisting Roles after logout
I am trying to login a virtual user for my application and have assigned roles to this virtual user.
var virtualUser = Sitecore.Security.Authentication.AuthenticationManager.BuildVirtualUser(userName, ...
- 437
3
votes
2
answers
1k
views
Authorization issue between Horizon and Content Management
I'm trying to setup Horizon 10.0.1 with Sitecore 10.0.1 on Azure with custom domain (no Content Hub).
I followed all the steps from the Azure PaaS Installation guide.
I use the following host names:
...
- 23.1k
0
votes
0
answers
290
views
Vulnerability Identified: It needs multifactor authentication for login
Vulnerability Identified: It needs multifactor authentication for login.
Is it possible to implement MFA in sitecore 7.5 application.
If yes,what are the ways we can accomplish it? Thanks.
- 31
1
vote
1
answer
412
views
How to get windows logged on user name in Sitecore 9.2 application
I need to get the windows logged on user name in the Sitecore 9.2 application.
I have enabled windows authentication in IIS ,
and tried with the
HttpContext.Current.User.Identity.Name its always ...
- 23
0
votes
0
answers
284
views
AuthenticationManager.Login always returning false on Load balanced Environment
We have created an extranet user in Sitecore CMS to authenticate users in the CD website for the POST method.
Below is the code written for the same.
AuthenticationManager.Login(domain + @"\"...
3
votes
0
answers
157
views
Windows Authentication For Single CD Page
I want to authenticate user based on there windows domain details, for single Sitecore CD server Page.
I Wanted to check if the user is accessing a page through my domain then allow user to login or ...
1
vote
2
answers
937
views
Authenticating with "remember me" not persisting beyond a few hours
I'm using Sitecore 9.1.1 and logging users into the front-end of my site using the AuthenticationManager.Login(domainUser, password, persist) call. By default I'm sending "true" for the persist ...
- 5,092
4
votes
2
answers
690
views
Why Content Delivery in Sitecore 9.3 is treating users as editors?
After upgrading to Sitecore 9.3, some times, users are not able to log in to Content Delivery (using ADFS) because we're exceeding the maximum editor's restriction by license. It's weird because is ...
- 81
2
votes
4
answers
1k
views
Virtual login code failing
We used the below code to virtually login the user to the Sitecore version 9.2
Sitecore.Security.Accounts.User virtualUser = AuthenticationManager.BuildVirtualUser("extranet\\user1", true);
...
- 1,966
0
votes
0
answers
47
views
How to pause SignedInArgs, move to a page, then continue OR create a new SignedInArgs to complete the login?
I've created a two-factor page for sitecore login on older sitecore (9.0 and below) by playing with its LoggedInArgs like this:
Check the condition if 2FA needed. If it is, then abort LoggedInArgs
...
- 367
0
votes
0
answers
45
views
Disable form authentication in sitecore 9 [duplicate]
I am using Sitecore federated authentication with azure AD to login to Sitecore. But, I can also use my Sitecore password to log in using form authentication.
Is there any OOB solution to disable ...
- 749
0
votes
0
answers
46
views
Issue while updating and removing users
Sitecore version : 9.0.2
We are using AD authentication to authenticate users. When we are creating new users ( AD users), they are getting created without any issue.However after creating the users, ...
- 73
0
votes
1
answer
294
views
how to implement login functionality on cd site by using custom sql database? [closed]
We have common user database table for different applications. So we need to implement login functionality only on CD site using external common sql db and for CMS we are using default sitecore user ...
- 521
2
votes
0
answers
510
views
Claims are not mapped and users are not persisted using Federated authentication
I'm using sitecore 9.1. I've implemented an IdentityProvidersProcessor using Microsoft.Owin.Security to authenticate users. I've added my transformations in a config file as below.
<!--list of ...
- 669
4
votes
1
answer
1k
views
PostLogoutRedirectUri with Owin and Azure ADb2C
Can anyone confirm if the Sitecore.Security.Authentication.AuthenticationManager.Logout();
handles the logout from AdB2c IDP as well, as per documentation from at:
https://doc.sitecore.com/...
- 1,655
1
vote
0
answers
653
views
Custom Login Page redirects to Sitecore default Login Page
I tried setting up a <site> element on my Project layer with parameters requiredLogin="true" loginPage="/Login" domain="extranet"
I also have granted these items with Read access:
sitecore/...
- 377
2
votes
0
answers
564
views
Virtual User is not persisted in federated authentication
We are integrating identity server authentication using Owin to a Sitecore 6.6 MVC application.
After successful authentication Im trying to login a Sitecore virtual user which seems not persisted to ...
- 407
1
vote
0
answers
76
views
How does a virtual user differ from a user authenticated using a custom membership provider?
Just wondering, what is the difference between a Sitecore virtual user and a user authenticated using a custom membership provider(and respective custom profile and role provider)?
I have been ...
- 407
0
votes
1
answer
614
views
In JSS how do I support both secure and open GraphQL endpoints?
In my JSS application, how do I support both authenticated (logged in) GraphQL endpoints and in-secure (public/open) GraphQL endpoints?
The example Angular application shows the usage of only one ...
- 1,079
1
vote
1
answer
265
views
How to implement SXA Authentication in selected pages?
I am trying to enable login feature for selected pages in SXA site using existing header and footer components.
There is an existing header component with option like a,b,c. I need to add login ...
- 11
1
vote
1
answer
113
views
End-user login via auth token
We're working on a conversion to Sitecore, and in their current system the client sends out emails with links back to the site. These links contain the user's email and an authentication token, so ...
- 5,092
1
vote
1
answer
395
views
How is authentication LoginPath being overridden?
Sitecore 8.2r170728, MVC 5, and AspNet Identity
We want to require direct links to pages of our site that require a logged in user to redirect to our login page and then return to the originally ...
- 85
1
vote
0
answers
168
views
Single Sign On between Sitecore 9 Application and Microsoft Dynamics Portal With Azure AD B2C
Our application is currently on Sitecore 9.0.2
There are two parts to our Application, one is the Sitecore application, the other part is a Microsoft Dynamics Portal Application
We have a ...
- 570
0
votes
1
answer
396
views
Sitecore 9.0.2 with Azure AD B2C System.ArgumentException: idp claim is missing Parameter name: identity
I am working on Sitecore 9.0.2 with Azure AD B2C for authentication of end users.
My Configurations are as shown below:
<pipelines>
<owin.identityProviders>
<!-- This is the ...
- 570
1
vote
1
answer
608
views
Response headers Error when trying to login to sitecore
I am getting the below exception when trying to login to Sitecore 8.2. I have been trying to setup new environment with Sitecore 8.2. I keep getting redirected to the login page and no error on the UI ...
- 613
0
votes
1
answer
426
views
Can't see the extra login buttons for external identity providers
Basically, that's the first time I'm playing with external identity providers in a federated authentication setup (Sitecore 9.1).
I can't say why but even after configuring everything I need ...
- 2,281
0
votes
1
answer
499
views
Prevent Login Redirect on 403 When an Ajax Call
Using Sitecore 9.1 and SXA 1.8
Does anyone know the best way to force Sitecore to return a legit 403 error when an Ajax call is hitting an API method?
Currently when the following code is thrown ...
- 321
1
vote
2
answers
4k
views
Sitecore redirects to no-access page instead of login page
I have the following site configuration for my Sitecore 9.1 site:
<site name="the-website" patch:after="site[@name='modules_website']"
language="en"
...
...
- 884