We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [authentication]

For questions related to user authentication in the Sitecore client, as well as site membership questions that are specific to Sitecore

Filter by
Sorted by
Tagged with
16
votes
3answers
3k views

Does Sitecore support SAML?

I'm aware of and have successfully used the AD module for numerous Sitecore implementations but I have a requirement to support SAML so that a non-AD based authentication provider can be used. Does ...
11
votes
1answer
1k views

Architecture choices for integrating Azure AD with Sitecore

We are replacing our native Sitecore authorization and user management in our customer portal with Azure AD. We would like Azure AD to also provide some profile data (we will probably extend the ...
7
votes
1answer
222 views

Experience Editor Timeout change

A client wants to change the timeout duration for users logged in through the shell/experience editor. I found 3 different places that seemed to reference timeouts for a user in Sitecore. <...
6
votes
1answer
479 views

Sitecore Logs shows The current user cannot be resolved from the authentication cookie

Sitecore logs are showing lot of these messages: WARN The current user cannot be resolved from the authentication cookie. The cookie will be removed. Ex: Line 556: 1820 07:14:48 WARN The ...
6
votes
1answer
372 views

Sitecore Logged In Pipeline in Identity Server?

I've created a Two Factor Authentication. It's working by adding our custom processor before Sitecore.Pipelines.LoggedIn.Ticket. But now in 9.1 with Identity Server, it won't be triggered unless I ...
5
votes
1answer
359 views

CM to Identity Server redirection issue

I'm running the Content Management (CM) and Sitecore Identity Server (SIS) roles on a single AWS EC2 instance. This is behind an AWS application load balancer, which accepts traffic on port 443 only ...
5
votes
1answer
307 views

Log in with Azure Active Directory

Our client needs to pre-authenticate with AD before common Sitecore built-in authentication (they don't need the AD users in Sitecore). We switched on "Log in with Azure Active Directory" at our CM ...
5
votes
1answer
645 views

Sitecore context user lost in custom MVC Route

I'm having a strange issue with my Sitecore.Context.User. I set up a custom MVC route for a controller that looks like this public class RouteConfig { public static void RegisterRoutes(...
4
votes
1answer
908 views

How to implement forgot password feature in any Sitecore application

When a user forgets his password, he/she can click on forgot password link which will trigger an email with password reset link. How to implement this functionality in a Sitecore application? Since ...
4
votes
2answers
77 views

Is Virtual user concept available in XM version?

One of the client is having an XM license and they need to implement the virtual user concept of the Sitecore do they need to update the existing licence or this feature is already supported with the ...
4
votes
3answers
499 views

Protecting a QA site from anonymous access

I'm trying to protect my QA site from anonymous users coming to it. I tried using basic authentication, which works for the front-end, but because it changes the authentication type to "Windows" it ...
4
votes
1answer
461 views

Error with Preview when logged in through Active Directory

I'm experiencing an issue with the Preview functionality when logged in to Sitecore through Azure Active Directory. Logging in through AD is following this approach: http://blog.baslijten.com/how-to-...
4
votes
1answer
262 views

Restricted Home Page showing Layout Requested Not Found

I am having issues about redirection to a page after using the Custom Login/Logout. The scenario is, I need to redirect the user to the Custom Login page, if accessing the Restricted Page (Test ...
4
votes
2answers
908 views

Log in virtual user with persistent flag

I am investigating using Sitecore virtual users so that I can authenticate with an external system and log users in that way. However, I also need to be able to support the persistent flag. Currently ...
4
votes
2answers
727 views

Sitecore losing the client session unexpectedly

On my Sitecore instance I'm authenticating a user programatically like this(adapted for this post): [HttpGet] public ActionResult MyAction(MyModel model) { //custom logic ...
3
votes
1answer
106 views

Why is SignInProcessor triggered twice?

I've created a custom pipeline to process the login to sent 2FA token. But somehow the pipeline is triggered twice. It doesn't happen with LoggingInProcessor (Used before Sitecore 9). Anyone know why? ...
3
votes
1answer
294 views

Using Sitecore authentication on external folders in IIS

We're using Sitecore authentication with a custom membership/roles database that's hooked into Sitecore with its own domain. We imported a ton of legacy data, and due to the number of documents, we ...
3
votes
0answers
73 views

Protecting Sitecore instance from anonymous access

I used to have Windows Authentication in-place and works like a charm! The thing is, now I have a Sitecore 8.2 update 4 (rev. 170614) and Forms Authentication is enabled by default, and whenever I ...
3
votes
1answer
232 views

How to use the Stormpath (or similar) OAuth provider to authenticate external users?

How can we replace the existing membership provider in Sitecore with an OAuth- based provider (like stormpath.com)? Further details: We are designing a solution in which the external users are stored ...
2
votes
3answers
3k views

Authentication and Authorization in Sitecore [closed]

I just started my journey as Sitecore developer.I want to create a user registration page and login page.I am totally confused where should i store the user details and how to authenticate him.
2
votes
3answers
448 views

Anonymous login system

In my project, I have to add a login system for users using a different database. These users will not have access to the sitecore functionality, only those with anonymous access. Any ideas how I can ...
2
votes
1answer
441 views

Restriction of Pages using sitecore domain

I am having issues using domain in Sitecore when pages are restricted to extranet\anonymous. So my goal is to restrict extranet\anoymous from viewing a page(Test Page) then redirect me to my custom ...
2
votes
2answers
741 views

How to validate a “Disabled” user account

If a user provides me their username and password, I am able to log them in using Sitecore.Security.Authentication.AuthenticationManager.Login(username, password) Or validate their account with ...
2
votes
1answer
462 views

Azure AD B2C login for endusers

We want to allow our endusers to login to our website using an Azure B2C AD account. I have only been able to find examples of how to add federated authentication for Sitecore accounts I have added ...
2
votes
0answers
23 views

PostLogoutRedirectUri with Owin and Azure ADb2C

Can anyone confirm if the Sitecore.Security.Authentication.AuthenticationManager.Logout(); handles the logout from AdB2c IDP as well, as per documentation from at: https://doc.sitecore.com/...
2
votes
0answers
110 views

Virtual User is not persisted in federated authentication

We are integrating identity server authentication using Owin to a Sitecore 6.6 MVC application. After successful authentication Im trying to login a Sitecore virtual user which seems not persisted to ...
2
votes
1answer
350 views

Sitecore 8.2 update 2 authentication failed on MongoDB 3.2 [closed]

I've the following scenario Sitecore 8.2 update 2 MongoDB 3.2 Now, I'm trying to setup authentication to MongoDB, and as soon as I update the mongod.cfg security: authorization: enabled and the ...
1
vote
2answers
425 views

Share Session across Sitecore subsites

I have a Sitecore multi-site solution set up to use a third party service to authenticate users, these sites are mostly divisions under the main site, but each one has its own host name and site ...
1
vote
1answer
187 views

Is there any limit for concurrent extranet domain users in a Sitecore website?

How many extranet users can login to a sitecore website at the same time? Is there any limitation for the number of concurrent logins? NB: This question is not about sitecore users(Number of ...
1
vote
3answers
207 views

Can SC_TICKET* keys be purged from the Properties table, and have tickets been moved elsewhere?

I'm troubleshooting an issue with slow logins on a Sitecore instance. As part of that investigation I've found a number of posts - such as Sitecore client and logon is very slow (properties table ...
1
vote
1answer
836 views

How to use Authenticated request with the Sitecore RESTful API

As explained in the official Sitecore documentation, I'm using the following block of code to login into the Sitecore. module.exports = function (context, req) { var XMLHttpRequest = require("...
1
vote
1answer
46 views

How to implement SXA Authentication in selected pages?

I am trying to enable login feature for selected pages in SXA site using existing header and footer components. There is an existing header component with option like a,b,c. I need to add login ...
1
vote
1answer
38 views

How is authentication LoginPath being overridden?

Sitecore 8.2r170728, MVC 5, and AspNet Identity We want to require direct links to pages of our site that require a logged in user to redirect to our login page and then return to the originally ...
1
vote
1answer
65 views

Response headers Error when trying to login to sitecore

I am getting the below exception when trying to login to Sitecore 8.2. I have been trying to setup new environment with Sitecore 8.2. I keep getting redirected to the login page and no error on the UI ...
1
vote
1answer
204 views

How to rework LoggingIn pipelines in Sitecore 9.1?

In Sitecore 8.2, I had pipeline with password complexity check: public class CheckPassword { public void Process(LoggingInArgs args) { var validator = new CustomValidator(); ...
1
vote
1answer
467 views

Virtual user custom properties missing on CD server

We have 2 load balanced CD servers. Session affinity is disabled on the load balancer and we are using MongoDB for session storage. User authentication is performed on a separate site. They are ...
1
vote
0answers
45 views

How does a virtual user differ from a user authenticated using a custom membership provider?

Just wondering, what is the difference between a Sitecore virtual user and a user authenticated using a custom membership provider(and respective custom profile and role provider)? I have been ...
1
vote
1answer
40 views

End-user login via auth token

We're working on a conversion to Sitecore, and in their current system the client sends out emails with links back to the site. These links contain the user's email and an authentication token, so ...
1
vote
0answers
52 views

Single Sign On between Sitecore 9 Application and Microsoft Dynamics Portal With Azure AD B2C

Our application is currently on Sitecore 9.0.2 There are two parts to our Application, one is the Sitecore application, the other part is a Microsoft Dynamics Portal Application We have a ...
1
vote
0answers
43 views

Users are authenticated with the Old/Copied session Cookies - Sitecore 7.2 -

How to prevent users from logging in using the old/Copied session cookies. For example, I copy my session cookies and then logout from my website. If I import the old/copied session cookies in another ...
1
vote
0answers
180 views

Membership provider per domain in multisite configuration

We have multisite setup with two websites pointing to two domains in sites.config and we are trying to map custom membership provider to each of the domains. Here is the configuration: Web.config: ...
1
vote
0answers
138 views

Supporting federated and forms authentication on the same site

We are building a site that needs to support multiple ways of logging in: Forms authentication using Sitecore's built-in user database. Users belong to the extranet domain. This part is already ...
1
vote
0answers
323 views

Sitecore 8 ADFS module no FedAuth cookie

I've added the Sitecore ADFS module to Sitecore 7.2 and it works. Using the same module on Sitecore 8 doesn't work. I can see the MSISAuth cookies from sts. When it comes to reading the FedAuth ...
0
votes
1answer
96 views

Access denied page in Sitecore when using requireLogin

Our current site (Sitecore 9.1) configuration looks like this: (simplified for readability) <site name="the-website" patch:after="site[@name='modules_website']" language="en" ... ...
0
votes
1answer
74 views

Sitecore 9.0.2 with Azure AD B2C System.ArgumentException: idp claim is missing Parameter name: identity

I am working on Sitecore 9.0.2 with Azure AD B2C for authentication of end users. My Configurations are as shown below: <pipelines> <owin.identityProviders> <!-- This is the ...
0
votes
2answers
539 views

Sitecore redirects to no-access page instead of login page

I have the following site configuration for my Sitecore 9.1 site: <site name="the-website" patch:after="site[@name='modules_website']" language="en" ... ...
0
votes
1answer
161 views

Fetch user's password programmtically on content delivery site

I am trying to fetch user's password on a content delivery site using below code snippet. But getting this exception This Membership Provider has not been configured to support password retrieval. ...
0
votes
1answer
319 views

Forms Authentication cookie with Sitecore

Does it require to explicitly set authentication cookie after authenticating user via Sitecore Authentication Manager? if (Sitecore.Security.Authentication.AuthenticationManager.Login( ...
0
votes
0answers
29 views

Custom Login Page redirects to Sitecore default Login Page

I tried setting up a <site> element on my Project layer with parameters requiredLogin="true" loginPage="/Login" domain="extranet" I also have granted these items with Read access: sitecore/...
0
votes
0answers
16 views

Mobile OTP based login in Sitecore

Sitecore login is based on a username & password. How to make it mobile number OTP based? Even after login, we should have access to the cookies. I have wondering to try this. Normal Controller/...