Questions tagged [authentication]

For questions related to user authentication in the Sitecore client, as well as site membership questions that are specific to Sitecore

Filter by
Sorted by
Tagged with
1 vote
1 answer
129 views

How to prevent multiple sessions from same user

We are using Sitecore 10.1.2 The CMS uses both native & Azure AD logins. A user is able to login to the CMS in multiple simultaneous sessions/browsers/from different IPs. Is it possible to prevent ...
  • 2,703
1 vote
0 answers
32 views

Restrict login between two websites with same domain [duplicate]

I have two websites www.abc.com/de-de and www.abc.com/es-es . if the user logs into the first website then he is automatically logged into the second website as the domain is same. how can I avoid ...
0 votes
0 answers
443 views

AuthenticationManager Logout does not trigger external OWIN middleware to logout until subsequent request

We have setup Auth0 as an external identity provider successfully where login works just fine for our public website. The sitecore authoring server uses the default Sitecore Identity Server. For the ...
0 votes
0 answers
40 views

Using PKCE authentication in Sitecore 9.2 with .Net framework

We are using Sitecore 9.2 (Identity Server 4). Which is currently not using PKCE authorization(Proof Key for Code Exchange). Our current site is on the .Net framework and I would like to know whether ...
0 votes
0 answers
166 views

Getting Microsoft.Owin.Security.OAuth.OAuthBearerAuthenticationMiddleware - Authentication failed

While using Azure AD B2C as an external identity provider we are getting Microsoft.Owin.Security.OAuth.OAuthBearerAuthenticationMiddleware - Authentication failed error in our security report. Anyone ...
  • 1
2 votes
2 answers
237 views

Migrate existing Owin implementation from pre-Sitecore 9

I am migrating an app from Sitecore 8 to 10. The existing app was built with .Net 4.6.1 and uses Microsoft AspNet Identity and Owin for user access. The Startup class uses the OwinStartupAttribute ...
  • 85
0 votes
0 answers
116 views

Sitecore 10.1 SSC Sitecore Services Client /sitecore/api/ssc/auth/login conflicts with Sitecore Identity Owin pipeline

I'm running Sitecore 10.1 with default, out of the box Sitecore Identity enabled as per Sitecore.Owin.Authentication.config. Auth for regular users into the Content Editor works. I used to be on ...
0 votes
2 answers
111 views

Require login headless dotnetcore

I am working on a project that is using Sitecore in headless mode with DotNetCore as the rendering host. It is hosted in Docker containers but I don't think that should matter. We have a requirement ...
  • 1
1 vote
1 answer
124 views

Single Session per user (session revocation)

I am trying to achieve one session per user for content management on XP9.3, understand that there don't seem to be an OOTB solution for this. So if a user have previously logged in on chrome onto ...
1 vote
1 answer
300 views

Sitecore services client 403 when login called from different web application

TL;DR: Sitecore services client 403 when login called from a different web application (IIS process), but not when called from Postman PROBLEM: RESTful Web API (web service) written in C# running on ...
  • 113
2 votes
0 answers
187 views

How to handle two user sessions at the same time in Sitecore

We have a Sitecore MVC website. The Sitecore version is 9.3.0. As of now, we have a login functionality on the website. We use AuthenticationManager.Login method and pass 3 parameters: username, ...
  • 78
1 vote
1 answer
114 views

Get current site in IdentityProvidersProcessor for Federated Login

We have a multisite architecture, and I am working on implementing the federated authentication using Auth0 for visitors login/signup. I need to fetch separate client id and secret per tenant based on ...
  • 387
0 votes
0 answers
161 views

Which Pipeline triggers the Logout when CookieAuthentication expires?

Is there a pipeline that I can hook into, when the CookieAuthentication time, that has been defined in config, expires? <owin.initialize> <processor name="CookieAuthentication&...
1 vote
1 answer
260 views

How to get the Azure AD access token from Sitecore Identity Server after using the Azure AD login and use the token for call to external APIs?

I have a Sitecore 9.2 application and a feature project for Web API . In the API controller classes I need to get the access token issued from Azure AD after using the Azure AD login on my Sitecore ...
0 votes
0 answers
107 views

How to keep the visitor logged in forever

I'm using Sitecore 10.1 with Commerce 10.1 and working on a requirement to keep the website visitor always logged in (even with browser close & system restarts). I have used the default SXA login ...
  • 2,703
2 votes
0 answers
42 views

Sitecore10 .Net Core Getting Started Template Architecture for Creating Action Methods

I am quite new to Sitecore 10, .Net Core , Docker, so asking this silly question :) I have followed the Sitecore 10 .Net core getting started template and able to create base setup. Now I understand ...
4 votes
2 answers
584 views

Virtual user persisting Roles after logout

I am trying to login a virtual user for my application and have assigned roles to this virtual user. var virtualUser = Sitecore.Security.Authentication.AuthenticationManager.BuildVirtualUser(userName, ...
  • 395
3 votes
2 answers
919 views

Authorization issue between Horizon and Content Management

I'm trying to setup Horizon 10.0.1 with Sitecore 10.0.1 on Azure with custom domain (no Content Hub). I followed all the steps from the Azure PaaS Installation guide. I use the following host names: ...
  • 21.5k
0 votes
0 answers
221 views

Vulnerability Identified: It needs multifactor authentication for login

Vulnerability Identified: It needs multifactor authentication for login. Is it possible to implement MFA in sitecore 7.5 application. If yes,what are the ways we can accomplish it? Thanks.
  • 1
1 vote
1 answer
265 views

How to get windows logged on user name in Sitecore 9.2 application

I need to get the windows logged on user name in the Sitecore 9.2 application. I have enabled windows authentication in IIS , and tried with the HttpContext.Current.User.Identity.Name its always ...
  • 23
0 votes
0 answers
246 views

AuthenticationManager.Login always returning false on Load balanced Environment

We have created an extranet user in Sitecore CMS to authenticate users in the CD website for the POST method. Below is the code written for the same. AuthenticationManager.Login(domain + @"\"...
3 votes
0 answers
146 views

Windows Authentication For Single CD Page

I want to authenticate user based on there windows domain details, for single Sitecore CD server Page. I Wanted to check if the user is accessing a page through my domain then allow user to login or ...
1 vote
2 answers
745 views

Authenticating with "remember me" not persisting beyond a few hours

I'm using Sitecore 9.1.1 and logging users into the front-end of my site using the AuthenticationManager.Login(domainUser, password, persist) call. By default I'm sending "true" for the persist ...
  • 5,082
4 votes
2 answers
633 views

Why Content Delivery in Sitecore 9.3 is treating users as editors?

After upgrading to Sitecore 9.3, some times, users are not able to log in to Content Delivery (using ADFS) because we're exceeding the maximum editor's restriction by license. It's weird because is ...
2 votes
4 answers
987 views

Virtual login code failing

We used the below code to virtually login the user to the Sitecore version 9.2 Sitecore.Security.Accounts.User virtualUser = AuthenticationManager.BuildVirtualUser("extranet\\user1", true); ...
0 votes
0 answers
45 views

How to pause SignedInArgs, move to a page, then continue OR create a new SignedInArgs to complete the login?

I've created a two-factor page for sitecore login on older sitecore (9.0 and below) by playing with its LoggedInArgs like this: Check the condition if 2FA needed. If it is, then abort LoggedInArgs ...
  • 355
0 votes
0 answers
45 views

Disable form authentication in sitecore 9 [duplicate]

I am using Sitecore federated authentication with azure AD to login to Sitecore. But, I can also use my Sitecore password to log in using form authentication. Is there any OOB solution to disable ...
0 votes
0 answers
46 views

Issue while updating and removing users

Sitecore version : 9.0.2 We are using AD authentication to authenticate users. When we are creating new users ( AD users), they are getting created without any issue.However after creating the users, ...
  • 73
0 votes
1 answer
243 views

how to implement login functionality on cd site by using custom sql database? [closed]

We have common user database table for different applications. So we need to implement login functionality only on CD site using external common sql db and for CMS we are using default sitecore user ...
  • 521
2 votes
0 answers
478 views

Claims are not mapped and users are not persisted using Federated authentication

I'm using sitecore 9.1. I've implemented an IdentityProvidersProcessor using Microsoft.Owin.Security to authenticate users. I've added my transformations in a config file as below. <!--list of ...
  • 649
4 votes
1 answer
1k views

PostLogoutRedirectUri with Owin and Azure ADb2C

Can anyone confirm if the Sitecore.Security.Authentication.AuthenticationManager.Logout(); handles the logout from AdB2c IDP as well, as per documentation from at: https://doc.sitecore.com/...
  • 1,645
1 vote
0 answers
610 views

Custom Login Page redirects to Sitecore default Login Page

I tried setting up a <site> element on my Project layer with parameters requiredLogin="true" loginPage="/Login" domain="extranet" I also have granted these items with Read access: sitecore/...
  • 357
2 votes
0 answers
521 views

Virtual User is not persisted in federated authentication

We are integrating identity server authentication using Owin to a Sitecore 6.6 MVC application. After successful authentication Im trying to login a Sitecore virtual user which seems not persisted to ...
  • 397
1 vote
0 answers
73 views

How does a virtual user differ from a user authenticated using a custom membership provider?

Just wondering, what is the difference between a Sitecore virtual user and a user authenticated using a custom membership provider(and respective custom profile and role provider)? I have been ...
  • 397
0 votes
1 answer
534 views

In JSS how do I support both secure and open GraphQL endpoints?

In my JSS application, how do I support both authenticated (logged in) GraphQL endpoints and in-secure (public/open) GraphQL endpoints? The example Angular application shows the usage of only one ...
  • 1,079
1 vote
1 answer
238 views

How to implement SXA Authentication in selected pages?

I am trying to enable login feature for selected pages in SXA site using existing header and footer components. There is an existing header component with option like a,b,c. I need to add login ...
  • 11
1 vote
1 answer
102 views

End-user login via auth token

We're working on a conversion to Sitecore, and in their current system the client sends out emails with links back to the site. These links contain the user's email and an authentication token, so ...
  • 5,082
1 vote
1 answer
321 views

How is authentication LoginPath being overridden?

Sitecore 8.2r170728, MVC 5, and AspNet Identity We want to require direct links to pages of our site that require a logged in user to redirect to our login page and then return to the originally ...
  • 85
1 vote
0 answers
161 views

Single Sign On between Sitecore 9 Application and Microsoft Dynamics Portal With Azure AD B2C

Our application is currently on Sitecore 9.0.2 There are two parts to our Application, one is the Sitecore application, the other part is a Microsoft Dynamics Portal Application We have a ...
0 votes
1 answer
376 views

Sitecore 9.0.2 with Azure AD B2C System.ArgumentException: idp claim is missing Parameter name: identity

I am working on Sitecore 9.0.2 with Azure AD B2C for authentication of end users. My Configurations are as shown below: <pipelines> <owin.identityProviders> <!-- This is the ...
1 vote
1 answer
493 views

Response headers Error when trying to login to sitecore

I am getting the below exception when trying to login to Sitecore 8.2. I have been trying to setup new environment with Sitecore 8.2. I keep getting redirected to the login page and no error on the UI ...
0 votes
1 answer
368 views

Can't see the extra login buttons for external identity providers

Basically, that's the first time I'm playing with external identity providers in a federated authentication setup (Sitecore 9.1). I can't say why but even after configuring everything I need ...
  • 2,261
0 votes
1 answer
465 views

Prevent Login Redirect on 403 When an Ajax Call

Using Sitecore 9.1 and SXA 1.8 Does anyone know the best way to force Sitecore to return a legit 403 error when an Ajax call is hitting an API method? Currently when the following code is thrown ...
  • 321
1 vote
2 answers
4k views

Sitecore redirects to no-access page instead of login page

I have the following site configuration for my Sitecore 9.1 site: <site name="the-website" patch:after="site[@name='modules_website']" language="en" ... ...
  • 884
0 votes
1 answer
593 views

Access denied page in Sitecore when using requireLogin

Our current site (Sitecore 9.1) configuration looks like this: (simplified for readability) <site name="the-website" patch:after="site[@name='modules_website']" language="en" ... ...
  • 884
1 vote
0 answers
130 views

Users are authenticated with the Old/Copied session Cookies - Sitecore 7.2 -

How to prevent users from logging in using the old/Copied session cookies. For example, I copy my session cookies and then logout from my website. If I import the old/copied session cookies in another ...
  • 373
3 votes
1 answer
2k views

Azure AD B2C login for endusers

We want to allow our endusers to login to our website using an Azure B2C AD account. I have only been able to find examples of how to add federated authentication for Sitecore accounts I have added ...
  • 884
4 votes
1 answer
257 views

Why is SignInProcessor triggered twice?

I've created a custom pipeline to process the login to sent 2FA token. But somehow the pipeline is triggered twice. It doesn't happen with LoggingInProcessor (Used before Sitecore 9). Anyone know why? ...
  • 355
4 votes
2 answers
145 views

Is Virtual user concept available in XM version?

One of the client is having an XM license and they need to implement the virtual user concept of the Sitecore do they need to update the existing licence or this feature is already supported with the ...
1 vote
2 answers
756 views

How to rework LoggingIn pipelines in Sitecore 9.1?

In Sitecore 8.2, I had pipeline with password complexity check: public class CheckPassword { public void Process(LoggingInArgs args) { var validator = new CustomValidator(); ...
  • 173