Episode #125 of the Stack Overflow podcast is here. We talk Tilde Club and mechanical keyboards. Listen now

Questions tagged [authentication]

For questions related to user authentication in the Sitecore client, as well as site membership questions that are specific to Sitecore

Filter by
Sorted by
Tagged with
0
votes
0answers
18 views

JS error on log out from launchpad

When I click the Log Out link on the Sitecore Launchpad in 9.1.1, I'm getting a 500 error on /sitecore/shell/api/sitecore/Authentication/Logout?sc_database=master from query-2.1.1.js, with the ...
0
votes
1answer
28 views

In JSS how do I support both secure and open GraphQL endpoints?

In my JSS application, how do I support both authenticated (logged in) GraphQL endpoints and in-secure (public/open) GraphQL endpoints? The example Angular application shows the usage of only one ...
1
vote
1answer
45 views

How to implement SXA Authentication in selected pages?

I am trying to enable login feature for selected pages in SXA site using existing header and footer components. There is an existing header component with option like a,b,c. I need to add login ...
1
vote
1answer
38 views

End-user login via auth token

We're working on a conversion to Sitecore, and in their current system the client sends out emails with links back to the site. These links contain the user's email and an authentication token, so ...
1
vote
1answer
35 views

How is authentication LoginPath being overridden?

Sitecore 8.2r170728, MVC 5, and AspNet Identity We want to require direct links to pages of our site that require a logged in user to redirect to our login page and then return to the originally ...
1
vote
0answers
43 views

Single Sign On between Sitecore 9 Application and Microsoft Dynamics Portal With Azure AD B2C

Our application is currently on Sitecore 9.0.2 There are two parts to our Application, one is the Sitecore application, the other part is a Microsoft Dynamics Portal Application We have a ...
0
votes
1answer
67 views

Sitecore 9.0.2 with Azure AD B2C System.ArgumentException: idp claim is missing Parameter name: identity

I am working on Sitecore 9.0.2 with Azure AD B2C for authentication of end users. My Configurations are as shown below: <pipelines> <owin.identityProviders> <!-- This is the ...
1
vote
1answer
49 views

Response headers Error when trying to login to sitecore

I am getting the below exception when trying to login to Sitecore 8.2. I have been trying to setup new environment with Sitecore 8.2. I keep getting redirected to the login page and no error on the UI ...
0
votes
1answer
68 views

Can't see the extra login buttons for external identity providers

Basically, that's the first time I'm playing with external identity providers in a federated authentication setup (Sitecore 9.1). I can't say why but even after configuring everything I need ...
0
votes
1answer
57 views

Prevent Login Redirect on 403 When an Ajax Call

Using Sitecore 9.1 and SXA 1.8 Does anyone know the best way to force Sitecore to return a legit 403 error when an Ajax call is hitting an API method? Currently when the following code is thrown ...
0
votes
2answers
415 views

Sitecore redirects to no-access page instead of login page

I have the following site configuration for my Sitecore 9.1 site: <site name="the-website" patch:after="site[@name='modules_website']" language="en" ... ...
0
votes
1answer
83 views

Access denied page in Sitecore when using requireLogin

Our current site (Sitecore 9.1) configuration looks like this: (simplified for readability) <site name="the-website" patch:after="site[@name='modules_website']" language="en" ... ...
1
vote
0answers
41 views

Users are authenticated with the Old/Copied session Cookies - Sitecore 7.2 -

How to prevent users from logging in using the old/Copied session cookies. For example, I copy my session cookies and then logout from my website. If I import the old/copied session cookies in another ...
2
votes
1answer
380 views

Azure AD B2C login for endusers

We want to allow our endusers to login to our website using an Azure B2C AD account. I have only been able to find examples of how to add federated authentication for Sitecore accounts I have added ...
3
votes
1answer
102 views

Why is SignInProcessor triggered twice?

I've created a custom pipeline to process the login to sent 2FA token. But somehow the pipeline is triggered twice. It doesn't happen with LoggingInProcessor (Used before Sitecore 9). Anyone know why? ...
4
votes
2answers
73 views

Is Virtual user concept available in XM version?

One of the client is having an XM license and they need to implement the virtual user concept of the Sitecore do they need to update the existing licence or this feature is already supported with the ...
1
vote
1answer
178 views

How to rework LoggingIn pipelines in Sitecore 9.1?

In Sitecore 8.2, I had pipeline with password complexity check: public class CheckPassword { public void Process(LoggingInArgs args) { var validator = new CustomValidator(); ...
6
votes
1answer
310 views

Sitecore Logged In Pipeline in Identity Server?

I've created a Two Factor Authentication. It's working by adding our custom processor before Sitecore.Pipelines.LoggedIn.Ticket. But now in 9.1 with Identity Server, it won't be triggered unless I ...
5
votes
1answer
334 views

CM to Identity Server redirection issue

I'm running the Content Management (CM) and Sitecore Identity Server (SIS) roles on a single AWS EC2 instance. This is behind an AWS application load balancer, which accepts traffic on port 443 only ...
0
votes
1answer
42 views

Sitecore Dual Public/Private Active Directory Authentication

I already have Active Directory authentication installed and working with Sitecore. I'm trying to set up a website that is available both publicly and privately. The private version uses Active ...
1
vote
3answers
190 views

Can SC_TICKET* keys be purged from the Properties table, and have tickets been moved elsewhere?

I'm troubleshooting an issue with slow logins on a Sitecore instance. As part of that investigation I've found a number of posts - such as Sitecore client and logon is very slow (properties table ...
0
votes
1answer
152 views

Fetch user's password programmtically on content delivery site

I am trying to fetch user's password on a content delivery site using below code snippet. But getting this exception This Membership Provider has not been configured to support password retrieval. ...
1
vote
0answers
167 views

Membership provider per domain in multisite configuration

we have multisite settup with two websites pointing to two domains in sites.config, and trying to map custom membership provider to each of the domains. here is the configuration: Web.config: &...
0
votes
1answer
212 views

Azure B2C integration with Sitecore 7.2 not working

We have integrated Azure B2C Multifactor Authentication logic using Openid connect. We are able to view Login page and able to authenticate user via Azure MFA. Our problem is when we are trying to ...
1
vote
1answer
804 views

How to use Authenticated request with the Sitecore RESTful API

As explained in the official Sitecore documentation, I'm using the following block of code to login into the Sitecore. module.exports = function (context, req) { var XMLHttpRequest = require("...
1
vote
0answers
133 views

Supporting federated and forms authentication on the same site

We are building a site that needs to support multiple ways of logging in: Forms authentication using Sitecore's built-in user database. Users belong to the extranet domain. This part is already ...
0
votes
1answer
299 views

Forms Authentication cookie with Sitecore

Does it require to explicitly set authentication cookie after authenticating user via Sitecore Authentication Manager? if (Sitecore.Security.Authentication.AuthenticationManager.Login( ...
3
votes
0answers
73 views

Protecting Sitecore instance from anonymous access

I used to have Windows Authentication in-place and works like a charm! The thing is, now I have a Sitecore 8.2 update 4 (rev. 170614) and Forms Authentication is enabled by default, and whenever I ...
1
vote
1answer
176 views

Is there any limit for concurrent extranet domain users in a Sitecore website?

How many extranet users can login to a sitecore website at the same time? Is there any limitation for the number of concurrent logins? NB: This question is not about sitecore users(Number of ...
1
vote
1answer
459 views

Virtual user custom properties missing on CD server

We have 2 load balanced CD servers. Session affinity is disabled on the load balancer and we are using MongoDB for session storage. User authentication is performed on a separate site. They are ...
-2
votes
1answer
252 views

Unable to cast object of type 'Sitecore.Web.SessionEndWorkerRequest'

For one of our current assignment, we are on: Sitecore 7.2 (rev. 141226) SOLR 4.6.1 Sitecore Media Framework 4.1 - Brightcove Clay Tablet 3.10.1 Mentioning the details cause recently we ...
4
votes
1answer
458 views

Error with Preview when logged in through Active Directory

I'm experiencing an issue with the Preview functionality when logged in to Sitecore through Azure Active Directory. Logging in through AD is following this approach: http://blog.baslijten.com/how-to-...
5
votes
1answer
303 views

Log in with Azure Active Directory

Our client needs to pre-authenticate with AD before common Sitecore built-in authentication (they don't need the AD users in Sitecore). We switched on "Log in with Azure Active Directory" at our CM ...
4
votes
1answer
881 views

How to implement forgot password feature in any Sitecore application

When a user forgets his password, he/she can click on forgot password link which will trigger an email with password reset link. How to implement this functionality in a Sitecore application? Since ...
4
votes
2answers
697 views

Sitecore losing the client session unexpectedly

On my Sitecore instance I'm authenticating a user programatically like this(adapted for this post): [HttpGet] public ActionResult MyAction(MyModel model) { //custom logic ...
7
votes
1answer
217 views

Experience Editor Timeout change

A client wants to change the timeout duration for users logged in through the shell/experience editor. I found 3 different places that seemed to reference timeouts for a user in Sitecore. <...
2
votes
1answer
427 views

Restriction of Pages using sitecore domain

I am having issues using domain in Sitecore when pages are restricted to extranet\anonymous. So my goal is to restrict extranet\anoymous from viewing a page(Test Page) then redirect me to my custom ...
4
votes
1answer
256 views

Restricted Home Page showing Layout Requested Not Found

I am having issues about redirection to a page after using the Custom Login/Logout. The scenario is, I need to redirect the user to the Custom Login page, if accessing the Restricted Page (Test ...
2
votes
3answers
437 views

Anonymous login system

In my project, I have to add a login system for users using a different database. These users will not have access to the sitecore functionality, only those with anonymous access. Any ideas how I can ...
5
votes
1answer
626 views

Sitecore context user lost in custom MVC Route

I'm having a strange issue with my Sitecore.Context.User. I set up a custom MVC route for a controller that looks like this public class RouteConfig { public static void RegisterRoutes(...
4
votes
2answers
895 views

Log in virtual user with persistent flag

I am investigating using Sitecore virtual users so that I can authenticate with an external system and log users in that way. However, I also need to be able to support the persistent flag. Currently ...
1
vote
2answers
412 views

Share Session across Sitecore subsites

I have a Sitecore multi-site solution set up to use a third party service to authenticate users, these sites are mostly divisions under the main site, but each one has its own host name and site ...
2
votes
2answers
726 views

How to validate a “Disabled” user account

If a user provides me their username and password, I am able to log them in using Sitecore.Security.Authentication.AuthenticationManager.Login(username, password) Or validate their account with ...
11
votes
1answer
1k views

Architecture choices for integrating Azure AD with Sitecore

We are replacing our native Sitecore authorization and user management in our customer portal with Azure AD. We would like Azure AD to also provide some profile data (we will probably extend the ...
2
votes
1answer
349 views

Sitecore 8.2 update 2 authentication failed on MongoDB 3.2 [closed]

I've the following scenario Sitecore 8.2 update 2 MongoDB 3.2 Now, I'm trying to setup authentication to MongoDB, and as soon as I update the mongod.cfg security: authorization: enabled and the ...
1
vote
0answers
322 views

Sitecore 8 ADFS module no FedAuth cookie

I've added the Sitecore ADFS module to Sitecore 7.2 and it works. Using the same module on Sitecore 8 doesn't work. I can see the MSISAuth cookies from sts. When it comes to reading the FedAuth ...
2
votes
3answers
3k views

Authentication and Authorization in Sitecore [closed]

I just started my journey as Sitecore developer.I want to create a user registration page and login page.I am totally confused where should i store the user details and how to authenticate him.
4
votes
3answers
484 views

Protecting a QA site from anonymous access

I'm trying to protect my QA site from anonymous users coming to it. I tried using basic authentication, which works for the front-end, but because it changes the authentication type to "Windows" it ...
3
votes
1answer
291 views

Using Sitecore authentication on external folders in IIS

We're using Sitecore authentication with a custom membership/roles database that's hooked into Sitecore with its own domain. We imported a ton of legacy data, and due to the number of documents, we ...
3
votes
1answer
231 views

How to use the Stormpath (or similar) OAuth provider to authenticate external users?

How can we replace the existing membership provider in Sitecore with an OAuth- based provider (like stormpath.com)? Further details: We are designing a solution in which the external users are stored ...