We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [security]

Questions related to security in all it's aspects (as long as related to Sitecore). Can be Sitecore product security or security of your Sitecore application.

Filter by
Sorted by
Tagged with
10
votes
3answers
589 views

SQL user creation is setting password of 12345, fails deployment

Using the updated Sitecore Azure Toolkit 2.0.1 rev. 171218, which has resources for 9.0.1, I'm hitting an error on the xc-collect\MSDeploy stage where it's attempting to apply the default sql user ...
37
votes
5answers
15k views

Is there a way to reset Sitecore admin password from database level?

I forgot my Sitecore admin password and was thinking a way to reset from database level. Is there a SQL query to reset Sitecore admin password ?
16
votes
3answers
3k views

Does Sitecore support SAML?

I'm aware of and have successfully used the AD module for numerous Sitecore implementations but I have a requirement to support SAML so that a non-AD based authentication provider can be used. Does ...
11
votes
1answer
958 views

How do you best manage security domains using SXA with the Active Directory module?

SXA provides the ability to create new tenants on-the-fly. Ideally each tenant would have a unique set of roles such as tenant1\admin and tenant1\editor. How do you configure roles and domains in ...
9
votes
1answer
4k views

Getting item from the Sitecore Item Service API not working remotely (403 Forbidden)

I was having an issue on a clients Staging environment where I was trying to use the Sitecore Item API to get items and I was getting an 403 error. It worked fine locally, I have a login method that ...
6
votes
0answers
163 views

How to enable custom hashing algorithm on identity server?

I have sitecore 9.1 and I added pipeline which add new hashing algorithm (pbkdf2 implementation from Zetetic team with 5000 iterations) to CryptoConfig and changed hashAlgorithmType to pbkdf2 in ...
4
votes
2answers
245 views

Revoke read access to the home page doesn't work

I installed a vanilla Sitecore 8.2.5 instance and revoked read access on Home page to extranet/anonymous user. I logged out from the shell site and hit the home page and I am still able to access it ! ...
2
votes
2answers
947 views

Troubleshooting “Could not create SSL/TLS secure channel” error in XConnect on Sitecore 9.1

I have a freshly-created Sitecore 9.1 instance. After setting up the xDB Migration Tool, I get the following error message when running the Troubleshooter: ERROR [Data Exchange] at Sitecore.Xdb....
23
votes
5answers
6k views

How do I disable /sitecore access on a Content Delivery Server?

I have 2 servers: Content Delivery - the live site pointing to the web database. Content Management - the internal only site pointing to the master database. I want to prevent access to /sitecore on ...
12
votes
2answers
2k views

WAF support with Sitecore Experience Platform

We are looking for a Web Application Firewall (WAF) solution for our Sitecore CMS implementation, because we are an Azure shop we specifically wanted to use the WAF feature on the Azure AppGateway ...
14
votes
2answers
2k views

Hiding items in the Content Editor for certain users / roles

The content editors want to divide up their roles so that some editors of the site only have access to edit and change a certain area of the site (e.g. /news and all its descendants). These editors ...
4
votes
1answer
251 views

IsAdministrator check no longer working on Sitecore 9.1

I created a few pages within our Sitecore setup to be accessed only by the Sitecore administrator while our site was still running on 8.2, using Sitecore.Context.IsAdministrator to check if the user ...
3
votes
1answer
65 views

Is it possible to teach the keepalive agent to overcome TLS/SSL certificate warnings?

We have an internal environment where the TLS/SSL certificate on tenants is not playing well with some requests. This is not a huge issue for clients who can add a one time trust for the certificate, ...
8
votes
1answer
676 views

Force Password Expiration

I used this before Sitecore 8 to force users to reset their passwords if they are past a certain date. I've been given this task again in Sitecore 8. It looks like the new change password page ...
8
votes
1answer
546 views

How do I set password complexity?

I need to change the password complexity requirements for authors to meet corporate standards of a password being: Minium of 8 characters Contain at least one numeral Contain at least one symbol
5
votes
1answer
176 views

Could it possible to find out who changed sitecore password through sitecore logs or db?

Is it possible find out who changed sitecore password through sitecore logs or db ?
1
vote
2answers
366 views

Sitecore permissions removed after deployment

A management role was added to Sitecore and permissions were granted to the role to allow Online Comms to manage content. The roles and accounts that were created still exist, however the permissions ...
1
vote
1answer
156 views

The form was not loaded due to an error. 401 403 unauthorized

Using custom roles setup to lockdown access. Gave access rights to the Forms folder and the app menu for the launchpad. However I receive the error on the GUI after clicking one of the forms to open ...