Questions tagged [authentication]

For questions related to user authentication in the Sitecore client, as well as site membership questions that are specific to Sitecore

Filter by
Sorted by
Tagged with
0
votes
1answer
136 views

Prevent Login Redirect on 403 When an Ajax Call

Using Sitecore 9.1 and SXA 1.8 Does anyone know the best way to force Sitecore to return a legit 403 error when an Ajax call is hitting an API method? Currently when the following code is thrown ...
0
votes
1answer
145 views

In JSS how do I support both secure and open GraphQL endpoints?

In my JSS application, how do I support both authenticated (logged in) GraphQL endpoints and in-secure (public/open) GraphQL endpoints? The example Angular application shows the usage of only one ...
0
votes
3answers
137 views

Virtual login code failing

We used the below code to virtually login the user to the Sitecore version 9.2 Sitecore.Security.Accounts.User virtualUser = AuthenticationManager.BuildVirtualUser("extranet\\user1", true); ...
1
vote
1answer
127 views

Why Content Delivery in Sitecore 9.3 is treating users as editors?

After upgrading to Sitecore 9.3, some times, users are not able to log in to Content Delivery (using ADFS) because we're exceeding the maximum editor's restriction by license. It's weird because is ...
0
votes
2answers
52 views

Authenticating with “remember me” not persisting beyond a few hours

I'm using Sitecore 9.1.1 and logging users into the front-end of my site using the AuthenticationManager.Login(domainUser, password, persist) call. By default I'm sending "true" for the persist ...
0
votes
0answers
31 views

How to pause SignedInArgs, move to a page, then continue OR create a new SignedInArgs to complete the login?

I've created a two-factor page for sitecore login on older sitecore (9.0 and below) by playing with its LoggedInArgs like this: Check the condition if 2FA needed. If it is, then abort LoggedInArgs ...
0
votes
0answers
25 views

Disable form authentication in sitecore 9 [duplicate]

I am using Sitecore federated authentication with azure AD to login to Sitecore. But, I can also use my Sitecore password to log in using form authentication. Is there any OOB solution to disable ...
0
votes
0answers
26 views

Issue while updating and removing users

Sitecore version : 9.0.2 We are using AD authentication to authenticate users. When we are creating new users ( AD users), they are getting created without any issue.However after creating the users, ...
0
votes
0answers
24 views

Sitecore services account external authentication graphql middle layer

We have a distributed backend system consisting of another CMS which maintains our user records. We currently user apollo to send auth requests to the main CMS system and retreive a JWT token. The ...
0
votes
1answer
51 views

how to implement login functionality on cd site by using custom sql database? [closed]

We have common user database table for different applications. So we need to implement login functionality only on CD site using external common sql db and for CMS we are using default sitecore user ...
11
votes
1answer
1k views

Architecture choices for integrating Azure AD with Sitecore

We are replacing our native Sitecore authorization and user management in our customer portal with Azure AD. We would like Azure AD to also provide some profile data (we will probably extend the ...
2
votes
0answers
94 views

Claims are not mapped and users are not persisted using Federated authentication

I'm using sitecore 9.1. I've implemented an IdentityProvidersProcessor using Microsoft.Owin.Security to authenticate users. I've added my transformations in a config file as below. <!--list of ...
1
vote
2answers
333 views

How to rework LoggingIn pipelines in Sitecore 9.1?

In Sitecore 8.2, I had pipeline with password complexity check: public class CheckPassword { public void Process(LoggingInArgs args) { var validator = new CustomValidator(); ...
3
votes
1answer
230 views

PostLogoutRedirectUri with Owin and Azure ADb2C

Can anyone confirm if the Sitecore.Security.Authentication.AuthenticationManager.Logout(); handles the logout from AdB2c IDP as well, as per documentation from at: https://doc.sitecore.com/...
1
vote
0answers
231 views

Membership provider per domain in multisite configuration

We have multisite setup with two websites pointing to two domains in sites.config and we are trying to map custom membership provider to each of the domains. Here is the configuration: Web.config: ...
1
vote
0answers
146 views

Custom Login Page redirects to Sitecore default Login Page

I tried setting up a <site> element on my Project layer with parameters requiredLogin="true" loginPage="/Login" domain="extranet" I also have granted these items with Read access: sitecore/...
2
votes
0answers
194 views

Virtual User is not persisted in federated authentication

We are integrating identity server authentication using Owin to a Sitecore 6.6 MVC application. After successful authentication Im trying to login a Sitecore virtual user which seems not persisted to ...
1
vote
0answers
58 views

How does a virtual user differ from a user authenticated using a custom membership provider?

Just wondering, what is the difference between a Sitecore virtual user and a user authenticated using a custom membership provider(and respective custom profile and role provider)? I have been ...
0
votes
0answers
41 views

Mobile OTP based login in Sitecore

Sitecore login is based on a username & password. How to make it mobile number OTP based? Even after login, we should have access to the cookies. I have wondering to try this. Normal Controller/...
0
votes
0answers
41 views

JS error on log out from launchpad

When I click the Log Out link on the Sitecore Launchpad in 9.1.1, I'm getting a 500 error on /sitecore/shell/api/sitecore/Authentication/Logout?sc_database=master from query-2.1.1.js, with the ...
1
vote
1answer
55 views

End-user login via auth token

We're working on a conversion to Sitecore, and in their current system the client sends out emails with links back to the site. These links contain the user's email and an authentication token, so ...
1
vote
1answer
86 views

How to implement SXA Authentication in selected pages?

I am trying to enable login feature for selected pages in SXA site using existing header and footer components. There is an existing header component with option like a,b,c. I need to add login ...
0
votes
1answer
148 views

Sitecore 9.0.2 with Azure AD B2C System.ArgumentException: idp claim is missing Parameter name: identity

I am working on Sitecore 9.0.2 with Azure AD B2C for authentication of end users. My Configurations are as shown below: <pipelines> <owin.identityProviders> <!-- This is the ...
1
vote
3answers
344 views

Can SC_TICKET* keys be purged from the Properties table, and have tickets been moved elsewhere?

I'm troubleshooting an issue with slow logins on a Sitecore instance. As part of that investigation I've found a number of posts - such as Sitecore client and logon is very slow (properties table ...
1
vote
1answer
80 views

How is authentication LoginPath being overridden?

Sitecore 8.2r170728, MVC 5, and AspNet Identity We want to require direct links to pages of our site that require a logged in user to redirect to our login page and then return to the originally ...
1
vote
0answers
91 views

Single Sign On between Sitecore 9 Application and Microsoft Dynamics Portal With Azure AD B2C

Our application is currently on Sitecore 9.0.2 There are two parts to our Application, one is the Sitecore application, the other part is a Microsoft Dynamics Portal Application We have a ...
1
vote
1answer
174 views

Response headers Error when trying to login to sitecore

I am getting the below exception when trying to login to Sitecore 8.2. I have been trying to setup new environment with Sitecore 8.2. I keep getting redirected to the login page and no error on the UI ...
3
votes
1answer
580 views

Restriction of Pages using sitecore domain

I am having issues using domain in Sitecore when pages are restricted to extranet\anonymous. So my goal is to restrict extranet\anoymous from viewing a page(Test Page) then redirect me to my custom ...
0
votes
1answer
144 views

Can't see the extra login buttons for external identity providers

Basically, that's the first time I'm playing with external identity providers in a federated authentication setup (Sitecore 9.1). I can't say why but even after configuring everything I need ...
0
votes
1answer
43 views

Sitecore Dual Public/Private Active Directory Authentication

I already have Active Directory authentication installed and working with Sitecore. I'm trying to set up a website that is available both publicly and privately. The private version uses Active ...
0
votes
2answers
1k views

Sitecore redirects to no-access page instead of login page

I have the following site configuration for my Sitecore 9.1 site: <site name="the-website" patch:after="site[@name='modules_website']" language="en" ... ...
0
votes
1answer
191 views

Access denied page in Sitecore when using requireLogin

Our current site (Sitecore 9.1) configuration looks like this: (simplified for readability) <site name="the-website" patch:after="site[@name='modules_website']" language="en" ... ...
1
vote
0answers
48 views

Users are authenticated with the Old/Copied session Cookies - Sitecore 7.2 -

How to prevent users from logging in using the old/Copied session cookies. For example, I copy my session cookies and then logout from my website. If I import the old/copied session cookies in another ...
3
votes
1answer
910 views

Azure AD B2C login for endusers

We want to allow our endusers to login to our website using an Azure B2C AD account. I have only been able to find examples of how to add federated authentication for Sitecore accounts I have added ...
6
votes
1answer
750 views

Sitecore Logged In Pipeline in Identity Server?

I've created a Two Factor Authentication. It's working by adding our custom processor before Sitecore.Pipelines.LoggedIn.Ticket. But now in 9.1 with Identity Server, it won't be triggered unless I ...
4
votes
1answer
123 views

Why is SignInProcessor triggered twice?

I've created a custom pipeline to process the login to sent 2FA token. But somehow the pipeline is triggered twice. It doesn't happen with LoggingInProcessor (Used before Sitecore 9). Anyone know why? ...
4
votes
2answers
117 views

Is Virtual user concept available in XM version?

One of the client is having an XM license and they need to implement the virtual user concept of the Sitecore do they need to update the existing licence or this feature is already supported with the ...
5
votes
1answer
528 views

CM to Identity Server redirection issue

I'm running the Content Management (CM) and Sitecore Identity Server (SIS) roles on a single AWS EC2 instance. This is behind an AWS application load balancer, which accepts traffic on port 443 only ...
0
votes
1answer
237 views

Fetch user's password programmtically on content delivery site

I am trying to fetch user's password on a content delivery site using below code snippet. But getting this exception This Membership Provider has not been configured to support password retrieval. ...
0
votes
1answer
463 views

Forms Authentication cookie with Sitecore

Does it require to explicitly set authentication cookie after authenticating user via Sitecore Authentication Manager? if (Sitecore.Security.Authentication.AuthenticationManager.Login( ...
17
votes
3answers
4k views

Does Sitecore support SAML?

I'm aware of and have successfully used the AD module for numerous Sitecore implementations but I have a requirement to support SAML so that a non-AD based authentication provider can be used. Does ...
0
votes
1answer
287 views

Azure B2C integration with Sitecore 7.2 not working

We have integrated Azure B2C Multifactor Authentication logic using Openid connect. We are able to view Login page and able to authenticate user via Azure MFA. Our problem is when we are trying to ...
1
vote
1answer
1k views

How to use Authenticated request with the Sitecore RESTful API

As explained in the official Sitecore documentation, I'm using the following block of code to login into the Sitecore. module.exports = function (context, req) { var XMLHttpRequest = require("...
1
vote
0answers
167 views

Supporting federated and forms authentication on the same site

We are building a site that needs to support multiple ways of logging in: Forms authentication using Sitecore's built-in user database. Users belong to the extranet domain. This part is already ...
3
votes
0answers
83 views

Protecting Sitecore instance from anonymous access

I used to have Windows Authentication in-place and works like a charm! The thing is, now I have a Sitecore 8.2 update 4 (rev. 170614) and Forms Authentication is enabled by default, and whenever I ...
1
vote
1answer
257 views

Is there any limit for concurrent extranet domain users in a Sitecore website?

How many extranet users can login to a sitecore website at the same time? Is there any limitation for the number of concurrent logins? NB: This question is not about sitecore users(Number of ...
1
vote
1answer
541 views

Virtual user custom properties missing on CD server

We have 2 load balanced CD servers. Session affinity is disabled on the load balancer and we are using MongoDB for session storage. User authentication is performed on a separate site. They are ...
1
vote
0answers
340 views

Sitecore 8 ADFS module no FedAuth cookie

I've added the Sitecore ADFS module to Sitecore 7.2 and it works. Using the same module on Sitecore 8 doesn't work. I can see the MSISAuth cookies from sts. When it comes to reading the FedAuth ...
-2
votes
1answer
314 views

Unable to cast object of type 'Sitecore.Web.SessionEndWorkerRequest'

For one of our current assignment, we are on: Sitecore 7.2 (rev. 141226) SOLR 4.6.1 Sitecore Media Framework 4.1 - Brightcove Clay Tablet 3.10.1 Mentioning the details cause recently we ...
5
votes
1answer
334 views

Log in with Azure Active Directory

Our client needs to pre-authenticate with AD before common Sitecore built-in authentication (they don't need the AD users in Sitecore). We switched on "Log in with Azure Active Directory" at our CM ...