9 votes
Accepted

How do I map my IdentityServer Claims to CustomProperties on the UserProfile?

I've added a new post on my blog here: https://sitecore.derekc.net/extending-sitecore-identitys-sitecore-profile-to-map-additional-profile-data/. Summary below: So three steps to add a field that ...
Derek C's user avatar
  • 783
6 votes

Architecture choices for integrating Azure AD with Sitecore

I cannot give you a detailed answer but you should know that in the future (not yet scheduled) the AD module will be retired and Sitecore will move away from the Microsoft Membership model and towards ...
Tamas Varga Sitecore's user avatar
6 votes
Accepted

Azure AD user not showing assigned roles/profile in user manager

I heard from Sitecore support on the roles at least, so I wanted to share this answer: The concept of the Federated Authentication means that you delegate authentication to a trusted identity ...
Ken McAndrew's user avatar
  • 5,092
4 votes
Accepted

Make Azure AD Login Page The Default Sitecore Login Page

Yes, you need to set loginPage attribute of shell site to $(loginPath)shell/SitecoreIdentityServer/IdS4-AzureAd. This will redirect /Sitecore/Login or /Sitecore to AzureAd login page directly Here is ...
Surya Narayan's user avatar
3 votes

How to do Sitecore SSO integration with Azure AD?

Follow the below steps to integrate the Azure Active Directory(AD) with the Sitecore identity server. This will enable users login to Sitecore via organizations credentials using SSO. Azure AD set up ...
Raman Gupta's user avatar
  • 2,339
3 votes
Accepted

IsAdministrator is "sticky" and never gets cleared, once set

Not much of an answer, but I can say that this has been confirmed as a bug. As of Sitecore version 9.2, this is still unresolved. I just followed up, and there is no official bug reference for this. ...
Mark Cassidy's user avatar
3 votes
Accepted

Error with Preview when logged in through Active Directory

I found that there is a configuration setting that can be enabled which runs the preview mode with the currently logged in user (an authenticated user) instead of the default/anonymous user. It's ...
Verdoorn's user avatar
  • 143
2 votes
Accepted

Unable to create Custom Attributes in Azure B2C AD

Raised a ticket with Microsoft to look into the issue. They have got their back-end team to look into the issue, and the investigation result seems that something in Azure platform didn't worked as ...
Amit Gaurav's user avatar
2 votes
Accepted

Azure AD B2C login for endusers

From what I can see, you are probably using Sitecore 9.0 or 9.1. Based on that assumption, your implementation is not correct. For Sitecore 9.0 and 9.1, you should used federated authentication to ...
Bas Lijten's user avatar
  • 1,857
2 votes
Accepted

LoggedIn processor with federated authentication

You have to use owin.cookieAuthentication.signedIn pipeline. There are a bunch of fedauth-related pipelines (like owin.cookieAuthentication.*) defined in the \App_Config\Sitecore\Owin.Authentication\...
Vyacheslav Pritykin's user avatar
2 votes

Sitecore Federated Authentication Administrator Group

Assuming you have configured federated authentication properly. You can do this by mapping claims. This is an excerpt an example from @Bas Lijten 's blog. As the Administrator role isn’t a real ...
josedbaez's user avatar
  • 1,792
2 votes
Accepted

Azure AD users unable to execute Sitecore PowerShell scripts

After doing some research, we discovered the following PR targeted at version 6.2 https://github.com/SitecorePowerShell/Console/pull/1227. We applied the fix to our 5.0 version, and it worked.
Martin English's user avatar
2 votes

Azure AD user groups mapped to one or more roles

On the documentation there are the following items: When you configure and use Azure AD with the Sitecore Identity server, you have to remember: Check the ID tokens checkbox in the Advanced Settings ...
Mark Gibbons's user avatar
  • 5,382
2 votes

Azure AD user groups mapped to one or more roles

I have a different scenario where I use 2 Azure AD groups to claim a single Sitecore Role, and it look like this <AzureADToAuthor type="Sitecore.Plugin.IdentityProviders....
Vinicius Deschamps's user avatar
2 votes
Accepted

AD users cannot publish anymore

We validated that it is related by removing the patch - setting the Publish.CheckSecurity back to false - and confirming that the issue was gone. But now our security isn't checked anymore during a ...
Gatogordo's user avatar
  • 19.8k
2 votes

Signing out of Sitecore with Azure AD

There is a setting in the Sitecore.Owin.Authentication.IdentityServer.config file. You can find this file on the following location: \App_Config\Sitecore\Owin.Authentication.IdentityServer\. Search ...
Jeroen Breuer's user avatar
2 votes

Roles get removed for AD login

If anyone faces the same problem of roles getting wiped out in Sitecore 10.3, when logging in using federated authentication, here is the solution. In the Sitecore config file Sitecore.Owin....
Dheeraj p's user avatar
  • 658
2 votes

Roles get removed for AD login

It is very likely to be what happened to me when applying a hotfix for 10.2. I wrote more about it here. My interpretation of what Sitecore support conveyed in my support ticket: The correct behavior ...
Michael West's user avatar
  • 17.8k
1 vote

Roles get removed for AD login

Sitecore Persistent and Virtual Users With external users, you have the option of creating virtual or persistent users. The difference being, virtual user dont exist in sitecore (information about ...
Dean OBrien's user avatar
  • 1,148
1 vote

How to do Sitecore SSO integration with Azure AD?

The following steps you need to perform for Sitecore SSO integration with Azure AD: Configuring Azure AD: Configure your application and get the Client and Tenant ids. Configuring Sitecore Identity: ...
Himmat Singh Dulawat's user avatar
1 vote

Unable to find any CM login information in Sitecore 10.1

If you are using Identity Server for CM authentication, then you will not get audit log for Login as Identity Server does not do AUDIT log by default. AUDIT (sitecore\admin): Login. If you disable the ...
Nehemiah Jeyakumar's user avatar
1 vote
Accepted

Federated Authentication with Azure AD - Sitecore 9.3 - .Aspnet .Cookies not getting created

Below code worked me - (able to login to public site without breaking sitecore login) public class AzureAdB2CWsFedIdentityProvider : IdentityProvidersProcessor { private readonly ...
NewbieHere's user avatar
1 vote

How to get the Azure AD access token from Sitecore Identity Server after using the Azure AD login and use the token for call to external APIs?

You can access IdToken in SecurityTokenValidated or OnRedirectToIdentityProvider event within your ConfigureServices OWIN pipeline. You may need to persist this IdToken in say Redis to access it ...
Julius A's user avatar
  • 746
1 vote
Accepted

Sitecore 9.0.2 with Azure AD B2C System.ArgumentException: idp claim is missing Parameter name: identity

I faced a similar issue and i came across this post which resolves the current issue: Could not find configuration node: federatedAuthentication/sharedTransformations/setIdpClaim Note: There might ...
Pawan's user avatar
  • 80
1 vote

How to configure Azure AD to work with Sitecore Identity Server?

At the time of registration, you can set redirect URI. Or you can set redirect URI inside Authentication which could be multiple after app registration. More detail you can find here https://...
Swati Gupta's user avatar
  • 2,720
1 vote

Does Sitecore support Azure AD B2C?

It could certainly be done, but it'll require some hand tooling. Aside from the articles linked by @Vinicius you should take a look at Create an ASP.NET web app with Azure Active Directory B2C sign-...
Richard Hauer's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible