Questions tagged [identity-server]

IdentityServer is a free, open source OpenID Connect and OAuth 2.0 framework for ASP.NET Core. Questions related to it in Sitecore environment, should use this tag.

Filter by
Sorted by
Tagged with
3
votes
0answers
43 views

SAML 2 - Use Identity Server or implement directly in OWIN Middleware?

I am thinking through a federated authentication approach requiring the use of a SAML 2 Identity Provider. The same Identity Provider infrastructure will be used for both the Sitecore admin and ...
0
votes
0answers
23 views

Identity Server + Sitecore Powershell: Non-admin cannot see scripts

I am using Sitecore 9.1 with Identity Server configured to authenticate users against Azure Active Directory. This works great and users can login with their azure accounts without issue. I have ...
2
votes
1answer
39 views

Is it possible to enable Refresh Token for Password grant type in Sitecore XC 9.0.2

So typically I see refresh tokens used with more secure methods of authentication with interactive flows such as Hybrid or Interactive, but I was curious if this is something that could also be ...
0
votes
0answers
22 views

Sitecore Identity Provider Plugin Assembly Not Found

I have followed the instructions to create a custom provider for the Sitecore identity server detailed here: https://doc.sitecore.com/developers/91/sitecore-experience-manager/en/use-the-sitecore-...
1
vote
1answer
89 views

Anti-forgery error when opening Identity Server

I am running Sitecore XP 9.2 and installed the Identity Server (IS) without SSL. Opening (e.g.) http://identity/.well-known/openid-configuration and retrieving tokens works fine. But I get an error ...
0
votes
0answers
29 views

Identity Server + Azure AD - Claims not refreshed?

I have configured a Sitecore 9.1 Identity Server to utilize Azure AD for authentication. Within Azure AD I have created a handful of roles, and assigned them to the necessary users. These roles are ...
0
votes
1answer
32 views

Identity server and analytics tracking

This is more a theoretical question. Assuming that we have a CRM that is the source of truth for the user base, so the users aren't in the Sitecore user manager/core database and any sign-up data goes ...
3
votes
1answer
90 views

Configuration patching not working in Identity Server

I am working on a Sitecore Managed Cloud project and for that, I want to patch AllowedCorsOrigins node to add AllowedCorsOriginsGroup2 for adding custom domain of CM site in Identity Server. Since ...
2
votes
1answer
105 views

Sitecore 9.1 Azure AD infinite redirect on /admin

I have an XP Single instance deployed to Azure PAAS that has been configured to use Azure AD by following this blog post: https://sitecore.derekc.net/setting-up-azure-active-directory-integration-...
2
votes
0answers
88 views

User externallogin redirect to public host after login

We have azure appservice for CD witch can be access through private url and public url. Private url is accessible just from internal network, and public url should be used by customer users. Customer ...
0
votes
1answer
110 views

Sitecore Context User issue with Preview mode via Sitecore Identity Server

We have an issue with Sitecore 9.1 context user on Preview mode. Sitecore.Context.User is showing as "extranet\Anonymous" in preview mode when Sitecore CM is authenticating via Identity Server. ...
1
vote
1answer
41 views

End-user login via auth token

We're working on a conversion to Sitecore, and in their current system the client sends out emails with links back to the site. These links contain the user's email and an authentication token, so ...
0
votes
1answer
86 views

Identity Server behind reverse proxy not reachable by CM

I have a Sitecore Identity Server (XP 9.1) running behind a Nginx reverse-proxy. The reverse-proxy handles the TLS encryption. Behind the reverse-proxy there is only HTTP traffic, so I added a HTTP ...
0
votes
1answer
69 views

Sitecore Identity Service in the Azure App Service is empty

On the IdentityServer I need to access the Sitecore.IdentityServer.Host.xml file to update the values of AllowedCorsOriginsGroup1 and PasswordRecoveryUrl to be the new DNS for the CM instance. This ...
2
votes
1answer
98 views

Getting IDX20803 when trying to log in via IdentityServer on my CD instance

I have a functioning login flow for my site via IdentityServer. When I test the flow on the CM server (but the frontend site) everything works ok. When I try the same thing on my CD server, I get: ...
0
votes
1answer
44 views

Should I harden Commerce Engine ApiSecret?

The default Commerce Engine implementation has a hard-coded Identity Server Api name & secret: .AddIdentityServerAuthentication(options => { options.Authority = this.Configuration....
4
votes
1answer
71 views

IsAdministrator is “sticky” and never gets cleared, once set

So we have Azure AD integration set up via Identity Server. We're on 9.1.1. By default the Sitecore.Plugin.IdentityProvider.AzureAd.xml configuration on IdentityServer, maps the isAdministrator claim ...
1
vote
1answer
41 views

How is authentication LoginPath being overridden?

Sitecore 8.2r170728, MVC 5, and AspNet Identity We want to require direct links to pages of our site that require a logged in user to redirect to our login page and then return to the originally ...
9
votes
2answers
212 views

How can I get SXA login working with my Federated Authentication via IdentityServer?

Background We're building an internal site where all users are required to be authenticated. I've configured IdentityServer to connect to the organisation's Azure AD and this is working fine. When I ...
6
votes
1answer
163 views

How do I map my IdentityServer Claims to CustomProperties on the UserProfile?

We're on Sitecore 9.1.1. I'm in the process of integrating Sitecore IdentityServer to our Azure AD, and have login working. I am now wanting to map AAD attributes to the user Sitecore generates for ...
5
votes
2answers
179 views

Can I use Sitecore's Configuration patching mechanics for my Identity Server configuration?

Fairly sure I can guess the answer, but getting this question on record is still useful. Long story short: Can I use config patch files to manage configuration settings on my Sitecore IS web ...
0
votes
2answers
122 views

Could not create instance of type: <my implementation of IdentityProvidersProcessor> No matching constructor was found

I'm using Sitecore 9.1 and following Sitecore's guide in implementing Federated Authentication. I am implementing Sitecore.Owin.Authentication.Pipelines.IdentityProviders.IdentityProvidersProcessor, ...
7
votes
1answer
67 views

Tenant Service not working

I'm using Data Exchange Framework and Tenant Service in Sitecore 9.1 with identity server on, and while testing the Tenant Service site with [host]/api/tenant request I constantly getting "login ...
0
votes
1answer
220 views

How to configure Azure AD to work with Sitecore Identity Server?

I am trying to set up Sitecore 9.1.1 Identity Server to act as a Federation Gateway with Azure AD (described here - https://doc.sitecore.com/developers/91/sitecore-experience-management/en/use-the-...
3
votes
1answer
145 views

Sitecore Identity Server on Azure App Service

I need some help to configure the KeyVault connection string for Azure App Service and Sitecore Identity Service. Sitecore Identity Server is based on aspnet core and the connection string settings ...
3
votes
2answers
985 views

What does this error message in the Identity Server logs mean?

I have a Sitecore 9.1.1 instance that I am trying to configure to use ADFS 2016 for Federated Authentication. I am following the instructions from this blog post - https://blog.istern.dk/2019/05/15/...
3
votes
0answers
187 views

Sitecore 9.1 and auth0 integration

I am trying to integrate Sitecore 9.1 and auth0 platform. I was following this tutorial for Sitecore 9.0 - https://blog.baslijten.com/enable-federated-authentication-and-configure-auth0-as-an-identity-...
2
votes
2answers
77 views

Is it possible to have Single Identity server for commerce and CMS?

when we install Sitecore 9.1, identity server is installed and when we install Sitecore Commerce, another Identity server is installed. Is it possible to have single identity server for both ...
2
votes
0answers
237 views

Sitecore Identity Server failing to access CM

I have an environment running in Azure PaaS using Sitecore 9.1 (initial release), and after a while I couldn't sign in to the CM anymore. I decide to restart the App Service, and once SI back up, the ...
2
votes
1answer
375 views

How to configure Identity Server 2.0.1 (Sitecore 9.1.1) to use Active Directory?

Has anyone successfully configured Identity Server 2.0.1 (SC 9.1.1) to use Active Directory? The only official documentation and examples I have seen are with Azure AD (not regular on prem AD). I ...
3
votes
0answers
118 views

Installation issue on migration 9.1.1

I am trying to migrate a Sitecore 9.0.2 to 9.1.1. Following the upgrade guide https://dev.sitecore.net/Downloads/Sitecore_Experience_Platform/91/Sitecore_Experience_Platform_91_Update1.aspx, I have to ...
3
votes
1answer
107 views

Why is SignInProcessor triggered twice?

I've created a custom pipeline to process the login to sent 2FA token. But somehow the pipeline is triggered twice. It doesn't happen with LoggingInProcessor (Used before Sitecore 9). Anyone know why? ...
0
votes
0answers
135 views

How to setup sitecore 9.1.0 CD server on same domain/different server and CM but have Active directory access, without a login box

Need some direction for a corporate intranet portal where CM/CD are different servers but in same domain behind a firewall, we are self hosted (not using Azure). We are running Sitecore 9.1.0 and ...
1
vote
0answers
175 views

Automatically attach user to external identity

On SC 9.0.2 we want to map an existing user in sitecore automatically to an external identity provider, but get the following error: [InvalidOperationException: Unable to create a user. Reason: ...
6
votes
0answers
182 views

How to enable custom hashing algorithm on identity server?

I have sitecore 9.1 and I added pipeline which add new hashing algorithm (pbkdf2 implementation from Zetetic team with 5000 iterations) to CryptoConfig and changed hashAlgorithmType to pbkdf2 in ...
0
votes
1answer
197 views

Method not found: 'Void Sitecore.Owin.Authentication.Pipelines.IdentityProviders.IdentityProvidersProcessor..ctor(Sitecore

In Sitecore 9.1 try to setup the Google Federated identity provider, getting below error, any help appreciated. The below steps are done, followed steps suggested in Sitecore documentation. Enabled ...
6
votes
1answer
391 views

Sitecore Logged In Pipeline in Identity Server?

I've created a Two Factor Authentication. It's working by adding our custom processor before Sitecore.Pipelines.LoggedIn.Ticket. But now in 9.1 with Identity Server, it won't be triggered unless I ...
5
votes
1answer
376 views

CM to Identity Server redirection issue

I'm running the Content Management (CM) and Sitecore Identity Server (SIS) roles on a single AWS EC2 instance. This is behind an AWS application load balancer, which accepts traffic on port 443 only ...
3
votes
1answer
454 views

Sitecore 9.1 forced back to log in screen [closed]

I have a Sitecore 9.1 instance in a PaaS environment in Azure. On the CM, when I try to log in to Sitecore, I get to the log in screen, I log in successfully, when it tries to redirect me back to ...
0
votes
0answers
145 views

Sitecore Identity server without return url

I have installed Sitecore 9.1 version. So I use the Sitecore Identity (SI) server to sign in standard Sitecore Client URL : https://sc91initial.identityserver/account/login?returnUrl=%2Fconnect%...
2
votes
0answers
290 views

IdentityServer URL throws HTTP Error 502.5 - Process Failure [closed]

I have vanilla 9.1 instance and I can login successfully. I browsed the Identity server URL and receiving HTTP Error 502.5 - Process Failure. Any idea why it is throwing 502.5 error? Log file shows ...
4
votes
1answer
266 views

IsAdministrator check no longer working on Sitecore 9.1

I created a few pages within our Sitecore setup to be accessed only by the Sitecore administrator while our site was still running on 8.2, using Sitecore.Context.IsAdministrator to check if the user ...
3
votes
1answer
106 views

Sitecore 9.1 password complexity

It seems that Sitecore 9.1, with the new Identity Server, no longer uses the same way of configuring password complexity as the previous versions. Some of the links that I found related to 9.0 and ...
6
votes
1answer
163 views

Where is the License file location for Identity Server in Sitecore 9.1?

I installed Sitecore 9.1 and noticed the new Identity Server site in IIS. My license is expired now. Where can i find the license file to replace for Identity Server?
0
votes
1answer
574 views

Sitecore 9.1 IdentityServer AzureAD subprovider user cannot login to the Admin site

I have configured Sitecore Identity to use Azure AD as the sub provider following the Sitecore document I can authenticate using my Azure AD account, but then I get the following message You do ...
1
vote
0answers
81 views

How to setup authentication when using a combination of Azure AD and a custom database to store user accounts?

I am using SXC 9.0.2. I have an Azure AD and would like to let Azure AD accounts access both the Content Editor and the Commerce Business Tools. End-users will also need to sign-in - these users will ...
0
votes
2answers
430 views

Troubleshooting Sitecore Identity Server routing errors in Sitecore 9

I am upgrading Sitecore 8.1 to 9.1. After resolving a number of config and dll-related errors, if I try to reach /sitecore I get redirected to /identity/login/shell/SitecoreIdentityServer Which ...
4
votes
1answer
319 views

Using the new Identy server in 9.1, it is still possible to implement a custom ASP.NET Membership provider?

Reading the documentation here: https://doc.sitecore.com/developers/91/sitecore-experience-management/en/sitecore-identity-server-authentication.html "The SI server uses identityserver-contrib-...
1
vote
1answer
161 views

Where can I change the Certificate Thumbprint from a Sitecore IdentityServer website?

I had to recreate my certs and after doing so and importing them into my IIS, I'm struggling now to find where exactly on the Sitecore IdentityServer website I must update its Thumbprint. Has anyone ...
1
vote
1answer
133 views

How to create a Sitecore Framework Plugin-based project in Visual Studio

The instructions for configuring a sub-provider for the Sitecore Identity Server (https://doc.sitecore.com/developers/91/sitecore-experience-management/en/use-the-sitecore-identity-server-as-a-...