Questions tagged [authentication]

For questions related to user authentication in the Sitecore client, as well as site membership questions that are specific to Sitecore

1
vote
1answer
23 views

Response headers Error when trying to login to sitecore

I am getting the below exception when trying to login to Sitecore 8.2. I have been trying to setup new environment with Sitecore 8.2. I keep getting redirected to the login page and no error on the UI ...
0
votes
1answer
31 views

Can't see the extra login buttons for external identity providers

Basically, that's the first time I'm playing with external identity providers in a federated authentication setup (Sitecore 9.1). I can't say why but even after configuring everything I need ...
0
votes
1answer
37 views

Prevent Login Redirect on 403 When an Ajax Call

Using Sitecore 9.1 and SXA 1.8 Does anyone know the best way to force Sitecore to return a legit 403 error when an Ajax call is hitting an API method? Currently when the following code is thrown ...
0
votes
2answers
67 views

Sitecore redirects to no-access page instead of login page

I have the following site configuration for my Sitecore 9.1 site: <site name="the-website" patch:after="site[@name='modules_website']" language="en" ... ...
0
votes
1answer
54 views

Access denied page in Sitecore when using requireLogin

Our current site (Sitecore 9.1) configuration looks like this: (simplified for readability) <site name="the-website" patch:after="site[@name='modules_website']" language="en" ... ...
1
vote
0answers
36 views

Users are authenticated with the Old/Copied session Cookies - Sitecore 7.2 -

How to prevent users from logging in using the old/Copied session cookies. For example, I copy my session cookies and then logout from my website. If I import the old/copied session cookies in another ...
1
vote
1answer
180 views

Azure AD B2C login for endusers

We want to allow our endusers to login to our website using an Azure B2C AD account. I have only been able to find examples of how to add federated authentication for Sitecore accounts I have added ...
3
votes
1answer
82 views

Why is SignInProcessor triggered twice?

I've created a custom pipeline to process the login to sent 2FA token. But somehow the pipeline is triggered twice. It doesn't happen with LoggingInProcessor (Used before Sitecore 9). Anyone know why? ...
4
votes
2answers
40 views

Is Virtual user concept available in XM version?

One of the client is having an XM license and they need to implement the virtual user concept of the Sitecore do they need to update the existing licence or this feature is already supported with the ...
1
vote
1answer
97 views

How to rework LoggingIn pipelines in Sitecore 9.1?

In Sitecore 8.2, I had pipeline with password complexity check: public class CheckPassword { public void Process(LoggingInArgs args) { var validator = new CustomValidator(); ...
6
votes
1answer
154 views

Sitecore Logged In Pipeline in Identity Server?

I've created a Two Factor Authentication. It's working by adding our custom processor before Sitecore.Pipelines.LoggedIn.Ticket. But now in 9.1 with Identity Server, it won't be triggered unless I ...
5
votes
1answer
153 views

CM to Identity Server redirection issue

I'm running the Content Management (CM) and Sitecore Identity Server (SIS) roles on a single AWS EC2 instance. This is behind an AWS application load balancer, which accepts traffic on port 443 only ...
0
votes
1answer
39 views

Sitecore Dual Public/Private Active Directory Authentication

I already have Active Directory authentication installed and working with Sitecore. I'm trying to set up a website that is available both publicly and privately. The private version uses Active ...
1
vote
2answers
112 views

Can SC_TICKET* keys be purged from the Properties table, and have tickets been moved elsewhere?

I'm troubleshooting an issue with slow logins on a Sitecore instance. As part of that investigation I've found a number of posts - such as Sitecore client and logon is very slow (properties table ...
0
votes
1answer
118 views

Fetch user's password programmtically on content delivery site

I am trying to fetch user's password on a content delivery site using below code snippet. But getting this exception This Membership Provider has not been configured to support password retrieval. ...
1
vote
0answers
108 views

Membership provider per domain in multisite configuration

we have multisite settup with two websites pointing to two domains in sites.config, and trying to map custom membership provider to each of the domains. here is the configuration: Web.config: &...
0
votes
1answer
178 views

Azure B2C integration with Sitecore 7.2 not working

We have integrated Azure B2C Multifactor Authentication logic using Openid connect. We are able to view Login page and able to authenticate user via Azure MFA. Our problem is when we are trying to ...
1
vote
1answer
589 views

How to use Authenticated request with the Sitecore RESTful API

As explained in the official Sitecore documentation, I'm using the following block of code to login into the Sitecore. module.exports = function (context, req) { var XMLHttpRequest = require("...
1
vote
0answers
117 views

Supporting federated and forms authentication on the same site

We are building a site that needs to support multiple ways of logging in: Forms authentication using Sitecore's built-in user database. Users belong to the extranet domain. This part is already ...
0
votes
1answer
184 views

Forms Authentication cookie with Sitecore

Does it require to explicitly set authentication cookie after authenticating user via Sitecore Authentication Manager? if (Sitecore.Security.Authentication.AuthenticationManager.Login( ...
3
votes
0answers
70 views

Protecting Sitecore instance from anonymous access

I used to have Windows Authentication in-place and works like a charm! The thing is, now I have a Sitecore 8.2 update 4 (rev. 170614) and Forms Authentication is enabled by default, and whenever I ...
1
vote
1answer
133 views

Is there any limit for concurrent extranet domain users in a Sitecore website?

How many extranet users can login to a sitecore website at the same time? Is there any limitation for the number of concurrent logins? NB: This question is not about sitecore users(Number of ...
1
vote
1answer
421 views

Virtual user custom properties missing on CD server

We have 2 load balanced CD servers. Session affinity is disabled on the load balancer and we are using MongoDB for session storage. User authentication is performed on a separate site. They are ...
-2
votes
1answer
230 views

Unable to cast object of type 'Sitecore.Web.SessionEndWorkerRequest'

For one of our current assignment, we are on: Sitecore 7.2 (rev. 141226) SOLR 4.6.1 Sitecore Media Framework 4.1 - Brightcove Clay Tablet 3.10.1 Mentioning the details cause recently we ...
4
votes
1answer
366 views

Error with Preview when logged in through Active Directory

I'm experiencing an issue with the Preview functionality when logged in to Sitecore through Azure Active Directory. Logging in through AD is following this approach: http://blog.baslijten.com/how-to-...
5
votes
1answer
282 views

Log in with Azure Active Directory

Our client needs to pre-authenticate with AD before common Sitecore built-in authentication (they don't need the AD users in Sitecore). We switched on "Log in with Azure Active Directory" at our CM ...
4
votes
1answer
746 views

How to implement forgot password feature in any Sitecore application

When a user forgets his password, he/she can click on forgot password link which will trigger an email with password reset link. How to implement this functionality in a Sitecore application? Since ...
4
votes
2answers
572 views

Sitecore losing the client session unexpectedly

On my Sitecore instance I'm authenticating a user programatically like this(adapted for this post): [HttpGet] public ActionResult MyAction(MyModel model) { //custom logic ...
7
votes
1answer
187 views

Experience Editor Timeout change

A client wants to change the timeout duration for users logged in through the shell/experience editor. I found 3 different places that seemed to reference timeouts for a user in Sitecore. <...
2
votes
1answer
352 views

Restriction of Pages using sitecore domain

I am having issues using domain in Sitecore when pages are restricted to extranet\anonymous. So my goal is to restrict extranet\anoymous from viewing a page(Test Page) then redirect me to my custom ...
4
votes
1answer
242 views

Restricted Home Page showing Layout Requested Not Found

I am having issues about redirection to a page after using the Custom Login/Logout. The scenario is, I need to redirect the user to the Custom Login page, if accessing the Restricted Page (Test ...
2
votes
3answers
367 views

Anonymous login system

In my project, I have to add a login system for users using a different database. These users will not have access to the sitecore functionality, only those with anonymous access. Any ideas how I can ...
5
votes
1answer
529 views

Sitecore context user lost in custom MVC Route

I'm having a strange issue with my Sitecore.Context.User. I set up a custom MVC route for a controller that looks like this public class RouteConfig { public static void RegisterRoutes(...
4
votes
2answers
833 views

Log in virtual user with persistent flag

I am investigating using Sitecore virtual users so that I can authenticate with an external system and log users in that way. However, I also need to be able to support the persistent flag. Currently ...
1
vote
2answers
383 views

Share Session across Sitecore subsites

I have a Sitecore multi-site solution set up to use a third party service to authenticate users, these sites are mostly divisions under the main site, but each one has its own host name and site ...
2
votes
2answers
628 views

How to validate a “Disabled” user account

If a user provides me their username and password, I am able to log them in using Sitecore.Security.Authentication.AuthenticationManager.Login(username, password) Or validate their account with ...
11
votes
1answer
1k views

Architecture choices for integrating Azure AD with Sitecore

We are replacing our native Sitecore authorization and user management in our customer portal with Azure AD. We would like Azure AD to also provide some profile data (we will probably extend the ...
2
votes
1answer
337 views

Sitecore 8.2 update 2 authentication failed on MongoDB 3.2 [closed]

I've the following scenario Sitecore 8.2 update 2 MongoDB 3.2 Now, I'm trying to setup authentication to MongoDB, and as soon as I update the mongod.cfg security: authorization: enabled and the ...
1
vote
0answers
318 views

Sitecore 8 ADFS module no FedAuth cookie

I've added the Sitecore ADFS module to Sitecore 7.2 and it works. Using the same module on Sitecore 8 doesn't work. I can see the MSISAuth cookies from sts. When it comes to reading the FedAuth ...
2
votes
3answers
3k views

Authentication and Authorization in Sitecore [closed]

I just started my journey as Sitecore developer.I want to create a user registration page and login page.I am totally confused where should i store the user details and how to authenticate him.
4
votes
3answers
449 views

Protecting a QA site from anonymous access

I'm trying to protect my QA site from anonymous users coming to it. I tried using basic authentication, which works for the front-end, but because it changes the authentication type to "Windows" it ...
3
votes
1answer
279 views

Using Sitecore authentication on external folders in IIS

We're using Sitecore authentication with a custom membership/roles database that's hooked into Sitecore with its own domain. We imported a ton of legacy data, and due to the number of documents, we ...
3
votes
1answer
228 views

How to use the Stormpath (or similar) OAuth provider to authenticate external users?

How can we replace the existing membership provider in Sitecore with an OAuth- based provider (like stormpath.com)? Further details: We are designing a solution in which the external users are stored ...
6
votes
1answer
442 views

Sitecore Logs shows The current user cannot be resolved from the authentication cookie

Sitecore logs are showing lot of these messages: WARN The current user cannot be resolved from the authentication cookie. The cookie will be removed. Ex: Line 556: 1820 07:14:48 WARN The ...
15
votes
3answers
3k views

Does Sitecore support SAML?

I'm aware of and have successfully used the AD module for numerous Sitecore implementations but I have a requirement to support SAML so that a non-AD based authentication provider can be used. Does ...