2022 Developer Survey is open! Take survey.

Questions tagged [authentication]

For questions related to user authentication in the Sitecore client, as well as site membership questions that are specific to Sitecore

Filter by
Sorted by
Tagged with
0 votes
0 answers
26 views

Getting Microsoft.Owin.Security.OAuth.OAuthBearerAuthenticationMiddleware - Authentication failed

While using Azure AD B2C as an external identity provider we are getting Microsoft.Owin.Security.OAuth.OAuthBearerAuthenticationMiddleware - Authentication failed error in our security report. Anyone ...
user avatar
  • 1
1 vote
2 answers
64 views

Migrate existing Owin implementation from pre-Sitecore 9

I am migrating an app from Sitecore 8 to 10. The existing app was built with .Net 4.6.1 and uses Microsoft AspNet Identity and Owin for user access. The Startup class uses the OwinStartupAttribute ...
user avatar
  • 75
0 votes
0 answers
25 views

Sitecore 10.1 SSC Sitecore Services Client /sitecore/api/ssc/auth/login conflicts with Sitecore Identity Owin pipeline

I'm running Sitecore 10.1 with default, out of the box Sitecore Identity enabled as per Sitecore.Owin.Authentication.config. Auth for regular users into the Content Editor works. I used to be on ...
user avatar
0 votes
1 answer
42 views

Require login headless dotnetcore

I am working on a project that is using Sitecore in headless mode with DotNetCore as the rendering host. It is hosted in Docker containers but I don't think that should matter. We have a requirement ...
user avatar
  • 1
1 vote
1 answer
38 views

Single Session per user (session revocation)

I am trying to achieve one session per user for content management on XP9.3, understand that there don't seem to be an OOTB solution for this. So if a user have previously logged in on chrome onto ...
user avatar
0 votes
1 answer
109 views

Sitecore services client 403 when login called from different web application

TL;DR: Sitecore services client 403 when login called from different web application (IIS process), but not when called from Postman PROBLEM: RESTful Web API (web service) written in C# running on IIS/...
user avatar
  • 101
2 votes
0 answers
104 views

How to handle two user sessions at the same time in Sitecore

We have a Sitecore MVC website. The Sitecore version is 9.3.0. As of now, we have a login functionality on the website. We use AuthenticationManager.Login method and pass 3 parameters: username, ...
user avatar
  • 78
1 vote
1 answer
78 views

Get current site in IdentityProvidersProcessor for Federated Login

We have a multisite architecture, and I am working on implementing the federated authentication using Auth0 for visitors login/signup. I need to fetch separate client id and secret per tenant based on ...
user avatar
0 votes
0 answers
96 views

Which Pipeline triggers the Logout when CookieAuthentication expires?

Is there a pipeline that I can hook into, when the CookieAuthentication time, that has been defined in config, expires? <owin.initialize> <processor name="CookieAuthentication&...
user avatar
0 votes
0 answers
34 views

Preview mode uses anonymous user despite Preview.AsAnonymous=false [duplicate]

I am on Sitecore 10.0.1 and I have a page that has authentication on it for my custom domain's anonymous account to have read access denied. In Experience Editor, when I click the Preview button, I'm ...
user avatar
  • 5,040
1 vote
1 answer
163 views

How to get the Azure AD access token from Sitecore Identity Server after using the Azure AD login and use the token for call to external APIs?

I have a Sitecore 9.2 application and a feature project for Web API . In the API controller classes I need to get the access token issued from Azure AD after using the Azure AD login on my Sitecore ...
user avatar
0 votes
0 answers
74 views

How to keep the visitor logged in forever

I'm using Sitecore 10.1 with Commerce 10.1 and working on a requirement to keep the website visitor always logged in (even with browser close & system restarts). I have used the default SXA login ...
user avatar
  • 2,573
2 votes
0 answers
36 views

Sitecore10 .Net Core Getting Started Template Architecture for Creating Action Methods

I am quite new to Sitecore 10, .Net Core , Docker, so asking this silly question :) I have followed the Sitecore 10 .Net core getting started template and able to create base setup. Now I understand ...
user avatar
4 votes
2 answers
353 views

Virtual user persisting Roles after logout

I am trying to login a virtual user for my application and have assigned roles to this virtual user. var virtualUser = Sitecore.Security.Authentication.AuthenticationManager.BuildVirtualUser(userName, ...
user avatar
  • 357
3 votes
2 answers
512 views

Authorization issue between Horizon and Content Management

I'm trying to setup Horizon 10.0.1 with Sitecore 10.0.1 on Azure with custom domain (no Content Hub). I followed all the steps from the Azure PaaS Installation guide. I use the following host names: ...
user avatar
0 votes
0 answers
163 views

Vulnerability Identified: It needs multifactor authentication for login

Vulnerability Identified: It needs multifactor authentication for login. Is it possible to implement MFA in sitecore 7.5 application. If yes,what are the ways we can accomplish it? Thanks.
user avatar
  • 1
0 votes
1 answer
178 views

How to get windows logged on user name in Sitecore 9.2 application

I need to get the windows logged on user name in the Sitecore 9.2 application. I have enabled windows authentication in IIS , and tried with the HttpContext.Current.User.Identity.Name its always ...
user avatar
  • 3
0 votes
0 answers
165 views

AuthenticationManager.Login always returning false on Load balanced Environment

We have created an extranet user in Sitecore CMS to authenticate users in the CD website for the POST method. Below is the code written for the same. AuthenticationManager.Login(domain + @"\"...
user avatar
2 votes
0 answers
123 views

Windows Authentication For Single CD Page

I want to authenticate user based on there windows domain details, for single Sitecore CD server Page. I Wanted to check if the user is accessing a page through my domain then allow user to login or ...
user avatar
1 vote
2 answers
519 views

Authenticating with "remember me" not persisting beyond a few hours

I'm using Sitecore 9.1.1 and logging users into the front-end of my site using the AuthenticationManager.Login(domainUser, password, persist) call. By default I'm sending "true" for the persist ...
user avatar
  • 5,040
3 votes
2 answers
540 views

Why Content Delivery in Sitecore 9.3 is treating users as editors?

After upgrading to Sitecore 9.3, some times, users are not able to log in to Content Delivery (using ADFS) because we're exceeding the maximum editor's restriction by license. It's weird because is ...
user avatar
2 votes
4 answers
749 views

Virtual login code failing

We used the below code to virtually login the user to the Sitecore version 9.2 Sitecore.Security.Accounts.User virtualUser = AuthenticationManager.BuildVirtualUser("extranet\\user1", true); ...
user avatar
0 votes
0 answers
42 views

How to pause SignedInArgs, move to a page, then continue OR create a new SignedInArgs to complete the login?

I've created a two-factor page for sitecore login on older sitecore (9.0 and below) by playing with its LoggedInArgs like this: Check the condition if 2FA needed. If it is, then abort LoggedInArgs ...
user avatar
0 votes
0 answers
44 views

Disable form authentication in sitecore 9 [duplicate]

I am using Sitecore federated authentication with azure AD to login to Sitecore. But, I can also use my Sitecore password to log in using form authentication. Is there any OOB solution to disable ...
user avatar
0 votes
0 answers
44 views

Issue while updating and removing users

Sitecore version : 9.0.2 We are using AD authentication to authenticate users. When we are creating new users ( AD users), they are getting created without any issue.However after creating the users, ...
user avatar
  • 73
0 votes
1 answer
177 views

how to implement login functionality on cd site by using custom sql database? [closed]

We have common user database table for different applications. So we need to implement login functionality only on CD site using external common sql db and for CMS we are using default sitecore user ...
user avatar
  • 499
2 votes
0 answers
397 views

Claims are not mapped and users are not persisted using Federated authentication

I'm using sitecore 9.1. I've implemented an IdentityProvidersProcessor using Microsoft.Owin.Security to authenticate users. I've added my transformations in a config file as below. <!--list of ...
user avatar
  • 577
3 votes
1 answer
892 views

PostLogoutRedirectUri with Owin and Azure ADb2C

Can anyone confirm if the Sitecore.Security.Authentication.AuthenticationManager.Logout(); handles the logout from AdB2c IDP as well, as per documentation from at: https://doc.sitecore.com/...
user avatar
  • 1,593
1 vote
0 answers
520 views

Custom Login Page redirects to Sitecore default Login Page

I tried setting up a <site> element on my Project layer with parameters requiredLogin="true" loginPage="/Login" domain="extranet" I also have granted these items with Read access: sitecore/...
user avatar
  • 273
2 votes
0 answers
428 views

Virtual User is not persisted in federated authentication

We are integrating identity server authentication using Owin to a Sitecore 6.6 MVC application. After successful authentication Im trying to login a Sitecore virtual user which seems not persisted to ...
user avatar
  • 397
1 vote
0 answers
65 views

How does a virtual user differ from a user authenticated using a custom membership provider?

Just wondering, what is the difference between a Sitecore virtual user and a user authenticated using a custom membership provider(and respective custom profile and role provider)? I have been ...
user avatar
  • 397
0 votes
1 answer
417 views

In JSS how do I support both secure and open GraphQL endpoints?

In my JSS application, how do I support both authenticated (logged in) GraphQL endpoints and in-secure (public/open) GraphQL endpoints? The example Angular application shows the usage of only one ...
user avatar
  • 1,059
1 vote
1 answer
197 views

How to implement SXA Authentication in selected pages?

I am trying to enable login feature for selected pages in SXA site using existing header and footer components. There is an existing header component with option like a,b,c. I need to add login ...
user avatar
  • 11
1 vote
1 answer
90 views

End-user login via auth token

We're working on a conversion to Sitecore, and in their current system the client sends out emails with links back to the site. These links contain the user's email and an authentication token, so ...
user avatar
  • 5,040
1 vote
1 answer
244 views

How is authentication LoginPath being overridden?

Sitecore 8.2r170728, MVC 5, and AspNet Identity We want to require direct links to pages of our site that require a logged in user to redirect to our login page and then return to the originally ...
user avatar
  • 75
1 vote
0 answers
142 views

Single Sign On between Sitecore 9 Application and Microsoft Dynamics Portal With Azure AD B2C

Our application is currently on Sitecore 9.0.2 There are two parts to our Application, one is the Sitecore application, the other part is a Microsoft Dynamics Portal Application We have a ...
user avatar
0 votes
1 answer
339 views

Sitecore 9.0.2 with Azure AD B2C System.ArgumentException: idp claim is missing Parameter name: identity

I am working on Sitecore 9.0.2 with Azure AD B2C for authentication of end users. My Configurations are as shown below: <pipelines> <owin.identityProviders> <!-- This is the ...
user avatar
1 vote
1 answer
391 views

Response headers Error when trying to login to sitecore

I am getting the below exception when trying to login to Sitecore 8.2. I have been trying to setup new environment with Sitecore 8.2. I keep getting redirected to the login page and no error on the UI ...
user avatar
0 votes
1 answer
288 views

Can't see the extra login buttons for external identity providers

Basically, that's the first time I'm playing with external identity providers in a federated authentication setup (Sitecore 9.1). I can't say why but even after configuring everything I need ...
user avatar
  • 2,221
0 votes
1 answer
397 views

Prevent Login Redirect on 403 When an Ajax Call

Using Sitecore 9.1 and SXA 1.8 Does anyone know the best way to force Sitecore to return a legit 403 error when an Ajax call is hitting an API method? Currently when the following code is thrown ...
user avatar
  • 311
0 votes
2 answers
3k views

Sitecore redirects to no-access page instead of login page

I have the following site configuration for my Sitecore 9.1 site: <site name="the-website" patch:after="site[@name='modules_website']" language="en" ... ...
user avatar
  • 834
0 votes
1 answer
462 views

Access denied page in Sitecore when using requireLogin

Our current site (Sitecore 9.1) configuration looks like this: (simplified for readability) <site name="the-website" patch:after="site[@name='modules_website']" language="en" ... ...
user avatar
  • 834
1 vote
0 answers
95 views

Users are authenticated with the Old/Copied session Cookies - Sitecore 7.2 -

How to prevent users from logging in using the old/Copied session cookies. For example, I copy my session cookies and then logout from my website. If I import the old/copied session cookies in another ...
user avatar
  • 373
3 votes
1 answer
2k views

Azure AD B2C login for endusers

We want to allow our endusers to login to our website using an Azure B2C AD account. I have only been able to find examples of how to add federated authentication for Sitecore accounts I have added ...
user avatar
  • 834
4 votes
1 answer
204 views

Why is SignInProcessor triggered twice?

I've created a custom pipeline to process the login to sent 2FA token. But somehow the pipeline is triggered twice. It doesn't happen with LoggingInProcessor (Used before Sitecore 9). Anyone know why? ...
user avatar
4 votes
2 answers
139 views

Is Virtual user concept available in XM version?

One of the client is having an XM license and they need to implement the virtual user concept of the Sitecore do they need to update the existing licence or this feature is already supported with the ...
user avatar
1 vote
2 answers
655 views

How to rework LoggingIn pipelines in Sitecore 9.1?

In Sitecore 8.2, I had pipeline with password complexity check: public class CheckPassword { public void Process(LoggingInArgs args) { var validator = new CustomValidator(); ...
user avatar
  • 163
7 votes
1 answer
1k views

Sitecore Logged In Pipeline in Identity Server?

I've created a Two Factor Authentication. It's working by adding our custom processor before Sitecore.Pipelines.LoggedIn.Ticket. But now in 9.1 with Identity Server, it won't be triggered unless I ...
user avatar
5 votes
1 answer
887 views

CM to Identity Server redirection issue

I'm running the Content Management (CM) and Sitecore Identity Server (SIS) roles on a single AWS EC2 instance. This is behind an AWS application load balancer, which accepts traffic on port 443 only ...
user avatar
0 votes
1 answer
44 views

Sitecore Dual Public/Private Active Directory Authentication

I already have Active Directory authentication installed and working with Sitecore. I'm trying to set up a website that is available both publicly and privately. The private version uses Active ...
user avatar
  • 287