Questions tagged [identity-server]

IdentityServer is a free, open source OpenID Connect and OAuth 2.0 framework for ASP.NET Core. Questions related to it in Sitecore environment, should use this tag.

Filter by
Sorted by
Tagged with
1
vote
1answer
32 views

Identity-Server with ADFS and OpenID

Official Sitecore documentation is very minimalistic in many points ;-) Has someone already implemented an IdentityServer provider to work with ADFS (not Azure AD) and OpenID with Sitecore 9.2? I ...
0
votes
0answers
23 views

Http 431 error on identity - Azure AD plugin for CMS Auth

We are using Azure AD plug in for sitecore CMS auth, version Sitecore 9.2. After successful login from azure when response is sent back from /signin-oidc, we are getting http 431 error on /Account/...
2
votes
0answers
49 views

Sitecore identity server and Azure AD: Signature validation failed

I have been following this guide to set up integration with Azure AD. I have configured the AD in Azure portal as mentioned in the guide. I have configured the IDs of tenant, application and the ...
0
votes
0answers
21 views

Sitecore Identity Server behind a ForwardProxy

I have a development environmnent 9.2 XP0 Set up with SIF. I have set-up Identity server and AzureAD integration. When i am connected at my Office everything works fine, after I click the Azure AD ...
2
votes
2answers
51 views

Using an Identity server for a Content Delivery

I would like to authente users using an identity server on a Content Delivery. Following Sitecore Documentation Configure a Sitecore instance and Sitecore Identity server I have : Patched the sc....
0
votes
2answers
46 views

Identity Server not redirecting to Azure Frontdoor URL

We are implementing URL hardening in Azure PaaS. We have added Azure front door urls to CM app. We have updated Sitecore.Owin.Authentication.IdentityServer.config on CM server with new url for ...
1
vote
1answer
24 views

Logging onto third-party system with SAML SSO

I'm working to integrate my Sitecore 9.1.1 instance with a third-party service (an LMS) that uses SAML SSO. This is a one-way integration, where the front-end user logs into the site with the usual ...
1
vote
1answer
146 views

Sitecore redirects for login page using hostname

We have a sitecore instance (xp0 for now) with an identity server. They are deployed to azure and belong to a private vnet. Access to nodes is done through the application gateway. But because of ...
0
votes
0answers
26 views

How to pause SignedInArgs, move to a page, then continue OR create a new SignedInArgs to complete the login?

I've created a two-factor page for sitecore login on older sitecore (9.0 and below) by playing with its LoggedInArgs like this: Check the condition if 2FA needed. If it is, then abort LoggedInArgs ...
0
votes
1answer
66 views

Implementing Federated Auth for Sitecore 9.2

Trying to implement Federated Authentication with ADFS for Sitecore 9.2 CM Instance, Following this blog post - http://blog.nikkipunjabi.com/2018/03/sitecore-federated-authentication-part-2-google-...
2
votes
1answer
111 views

Login with multiple Identity Providers at the same time

I've configured a custom Identity Provider based on this info: http://blog.baslijten.com/enable-federated-authentication-and-configure-auth0-as-an-identity-provider-in-sitecore-9-0/ Unsuccessful ...
3
votes
0answers
24 views

Accessing Azure B2C Access Token with Sitecore ID Server

In Sitecore 9.1 we have integrated Azure B2C with Sitecore Identity Server. We now need to get access to the Azure B2C Access Token on the Sitecore CD server, which was based to Sitecore Identity ...
0
votes
0answers
88 views

Identity Server is not working

Good Day, I have Sitecore 9.1.1 installed on azure, im trying to log in but it keeps redirecting to an error page, when I checked the identityServerAuthority URL I found that it is not working(...
0
votes
1answer
33 views

Extra log in button showing

On my new fresh install of Sitecore Identity Server, I see the extra log in button: My understanding is this appears if you have an external identity server set up. But I do not. This is a fresh ...
3
votes
1answer
85 views

Use Identity Server for multiple CM instances

We are using Sitecore 9.2 and have several different instances (completely separated with its own deployment for creating different websites). We want to introduce Azure AD login to use domain login ...
1
vote
0answers
80 views

Invalid redirect_uri issue

I installed Sitecore 9.3 on Azure. Everything is working fine. Next I installed Sitecore Horizon 9.3 on Azure. Then If I try to click on Horizon icon from Sitecore. It is giving error. I tried below ...
5
votes
1answer
135 views

SAML 2 - Use Identity Server or implement directly in OWIN Middleware?

I am thinking through a federated authentication approach requiring the use of a SAML 2 Identity Provider. The same Identity Provider infrastructure will be used for both the Sitecore admin and ...
0
votes
0answers
51 views

Identity Server + Sitecore Powershell: Non-admin cannot see scripts

I am using Sitecore 9.1 with Identity Server configured to authenticate users against Azure Active Directory. This works great and users can login with their azure accounts without issue. I have ...
2
votes
1answer
67 views

Is it possible to enable Refresh Token for Password grant type in Sitecore XC 9.0.2

So typically I see refresh tokens used with more secure methods of authentication with interactive flows such as Hybrid or Interactive, but I was curious if this is something that could also be ...
0
votes
0answers
35 views

Sitecore Identity Provider Plugin Assembly Not Found

I have followed the instructions to create a custom provider for the Sitecore identity server detailed here: https://doc.sitecore.com/developers/91/sitecore-experience-manager/en/use-the-sitecore-...
1
vote
1answer
309 views

Anti-forgery error when opening Identity Server

I am running Sitecore XP 9.2 and installed the Identity Server (IS) without SSL. Opening (e.g.) http://identity/.well-known/openid-configuration and retrieving tokens works fine. But I get an error ...
0
votes
0answers
37 views

Identity Server + Azure AD - Claims not refreshed?

I have configured a Sitecore 9.1 Identity Server to utilize Azure AD for authentication. Within Azure AD I have created a handful of roles, and assigned them to the necessary users. These roles are ...
0
votes
1answer
34 views

Identity server and analytics tracking

This is more a theoretical question. Assuming that we have a CRM that is the source of truth for the user base, so the users aren't in the Sitecore user manager/core database and any sign-up data goes ...
3
votes
1answer
149 views

Configuration patching not working in Identity Server

I am working on a Sitecore Managed Cloud project and for that, I want to patch AllowedCorsOrigins node to add AllowedCorsOriginsGroup2 for adding custom domain of CM site in Identity Server. Since ...
2
votes
1answer
223 views

Sitecore 9.1 Azure AD infinite redirect on /admin

I have an XP Single instance deployed to Azure PAAS that has been configured to use Azure AD by following this blog post: https://sitecore.derekc.net/setting-up-azure-active-directory-integration-...
2
votes
0answers
141 views

User externallogin redirect to public host after login

We have azure appservice for CD witch can be access through private url and public url. Private url is accessible just from internal network, and public url should be used by customer users. Customer ...
0
votes
1answer
220 views

Sitecore Context User issue with Preview mode via Sitecore Identity Server

We have an issue with Sitecore 9.1 context user on Preview mode. Sitecore.Context.User is showing as "extranet\Anonymous" in preview mode when Sitecore CM is authenticating via Identity Server. ...
1
vote
1answer
51 views

End-user login via auth token

We're working on a conversion to Sitecore, and in their current system the client sends out emails with links back to the site. These links contain the user's email and an authentication token, so ...
0
votes
1answer
141 views

Identity Server behind reverse proxy not reachable by CM

I have a Sitecore Identity Server (XP 9.1) running behind a Nginx reverse-proxy. The reverse-proxy handles the TLS encryption. Behind the reverse-proxy there is only HTTP traffic, so I added a HTTP ...
0
votes
1answer
109 views

Sitecore Identity Service in the Azure App Service is empty

On the IdentityServer I need to access the Sitecore.IdentityServer.Host.xml file to update the values of AllowedCorsOriginsGroup1 and PasswordRecoveryUrl to be the new DNS for the CM instance. This ...
2
votes
1answer
160 views

Getting IDX20803 when trying to log in via IdentityServer on my CD instance

I have a functioning login flow for my site via IdentityServer. When I test the flow on the CM server (but the frontend site) everything works ok. When I try the same thing on my CD server, I get: ...
0
votes
1answer
50 views

Should I harden Commerce Engine ApiSecret?

The default Commerce Engine implementation has a hard-coded Identity Server Api name & secret: .AddIdentityServerAuthentication(options => { options.Authority = this.Configuration....
4
votes
1answer
103 views

IsAdministrator is “sticky” and never gets cleared, once set

So we have Azure AD integration set up via Identity Server. We're on 9.1.1. By default the Sitecore.Plugin.IdentityProvider.AzureAd.xml configuration on IdentityServer, maps the isAdministrator claim ...
1
vote
1answer
59 views

How is authentication LoginPath being overridden?

Sitecore 8.2r170728, MVC 5, and AspNet Identity We want to require direct links to pages of our site that require a logged in user to redirect to our login page and then return to the originally ...
11
votes
2answers
683 views

How can I get SXA login working with my Federated Authentication via IdentityServer?

Background We're building an internal site where all users are required to be authenticated. I've configured IdentityServer to connect to the organisation's Azure AD and this is working fine. When I ...
6
votes
1answer
291 views

How do I map my IdentityServer Claims to CustomProperties on the UserProfile?

We're on Sitecore 9.1.1. I'm in the process of integrating Sitecore IdentityServer to our Azure AD, and have login working. I am now wanting to map AAD attributes to the user Sitecore generates for ...
6
votes
2answers
238 views

Can I use Sitecore's Configuration patching mechanics for my Identity Server configuration?

Fairly sure I can guess the answer, but getting this question on record is still useful. Long story short: Can I use config patch files to manage configuration settings on my Sitecore IS web ...
1
vote
2answers
231 views

Could not create instance of type: <my implementation of IdentityProvidersProcessor> No matching constructor was found

I'm using Sitecore 9.1 and following Sitecore's guide in implementing Federated Authentication. I am implementing Sitecore.Owin.Authentication.Pipelines.IdentityProviders.IdentityProvidersProcessor, ...
7
votes
1answer
85 views

Tenant Service not working

I'm using Data Exchange Framework and Tenant Service in Sitecore 9.1 with identity server on, and while testing the Tenant Service site with [host]/api/tenant request I constantly getting "login ...
1
vote
1answer
458 views

How to configure Azure AD to work with Sitecore Identity Server?

I am trying to set up Sitecore 9.1.1 Identity Server to act as a Federation Gateway with Azure AD (described here - https://doc.sitecore.com/developers/91/sitecore-experience-management/en/use-the-...
3
votes
1answer
178 views

Sitecore Identity Server on Azure App Service

I need some help to configure the KeyVault connection string for Azure App Service and Sitecore Identity Service. Sitecore Identity Server is based on aspnet core and the connection string settings ...
3
votes
2answers
2k views

What does this error message in the Identity Server logs mean?

I have a Sitecore 9.1.1 instance that I am trying to configure to use ADFS 2016 for Federated Authentication. I am following the instructions from this blog post - https://blog.istern.dk/2019/05/15/...
3
votes
0answers
237 views

Sitecore 9.1 and auth0 integration

I am trying to integrate Sitecore 9.1 and auth0 platform. I was following this tutorial for Sitecore 9.0 - https://blog.baslijten.com/enable-federated-authentication-and-configure-auth0-as-an-identity-...
2
votes
2answers
118 views

Is it possible to have Single Identity server for commerce and CMS?

when we install Sitecore 9.1, identity server is installed and when we install Sitecore Commerce, another Identity server is installed. Is it possible to have single identity server for both ...
2
votes
0answers
344 views

Sitecore Identity Server failing to access CM

I have an environment running in Azure PaaS using Sitecore 9.1 (initial release), and after a while I couldn't sign in to the CM anymore. I decide to restart the App Service, and once SI back up, the ...
2
votes
1answer
492 views

How to configure Identity Server 2.0.1 (Sitecore 9.1.1) to use Active Directory?

Has anyone successfully configured Identity Server 2.0.1 (SC 9.1.1) to use Active Directory? The only official documentation and examples I have seen are with Azure AD (not regular on prem AD). I ...
3
votes
0answers
133 views

Installation issue on migration 9.1.1

I am trying to migrate a Sitecore 9.0.2 to 9.1.1. Following the upgrade guide https://dev.sitecore.net/Downloads/Sitecore_Experience_Platform/91/Sitecore_Experience_Platform_91_Update1.aspx, I have to ...
3
votes
1answer
115 views

Why is SignInProcessor triggered twice?

I've created a custom pipeline to process the login to sent 2FA token. But somehow the pipeline is triggered twice. It doesn't happen with LoggingInProcessor (Used before Sitecore 9). Anyone know why? ...
0
votes
0answers
161 views

How to setup sitecore 9.1.0 CD server on same domain/different server and CM but have Active directory access, without a login box

Need some direction for a corporate intranet portal where CM/CD are different servers but in same domain behind a firewall, we are self hosted (not using Azure). We are running Sitecore 9.1.0 and ...
1
vote
0answers
234 views

Automatically attach user to external identity

On SC 9.0.2 we want to map an existing user in sitecore automatically to an external identity provider, but get the following error: [InvalidOperationException: Unable to create a user. Reason: ...