Skip to main content
Share Your Experience: Take the 2024 Developer Survey
45 votes
Accepted

Installing 9.1 XP0 - Sorry, there was an error : unauthorized_client

After speaking with my friend @kamsar, he pointed out the CORS origin on the Identity Server Instance needs an update. The Identity Server doesn't allow logging in from just any url, for security ...
Michael West's user avatar
  • 18.2k
11 votes
Accepted

Where is the License file location for Identity Server in Sitecore 9.1?

In Sitecore 9.1 license file for Identity Server is kept in sitecoreruntime\license.xml Just replace the file with your license and restart the app.
Marek Musielak's user avatar
  • 23.8k
9 votes
Accepted

use external application to get Identity Server token / cookie

With some serious Googling, and with the help of the Community and this gist I was able to successfully get a token from Sitecore 9.1's Identity Server. First, you need to add a new Client to the ...
jflsitecore's user avatar
9 votes
Accepted

How do I map my IdentityServer Claims to CustomProperties on the UserProfile?

I've added a new post on my blog here: https://sitecore.derekc.net/extending-sitecore-identitys-sitecore-profile-to-map-additional-profile-data/. Summary below: So three steps to add a field that ...
Derek C's user avatar
  • 783
8 votes

Installing 9.1 XP0 - Sorry, there was an error : unauthorized_client

In addition to Michaels correct answer: It is also possible to define the AllowedCorsOrigins pipe-separated. I also stuck on this and found the description in the IdentityServer WDP zip (parameters....
monkey.dsc's user avatar
8 votes
Accepted

IsAdministrator check no longer working on Sitecore 9.1

In 9.1, you need to patch in the path of your custom admin pages to the list of the siteNeutralPaths for the ValidateSiteNeutralPaths processor in the owin.cookieAuthentication.validateIdentity ...
Corey Smith's user avatar
  • 2,718
8 votes
Accepted

Can I use Sitecore's Configuration patching mechanics for my Identity Server configuration?

Sitecore Host (the platform Sitecore Identity is built on) does have a "patching" mechanism for configuration files that is an extension of the default ASP.NET Core configuration builder. When a ...
George Chang's user avatar
  • 1,225
6 votes

Installing 9.1 XP0 - Sorry, there was an error : unauthorized_client

I tried using https instead of http to access my local sitecore admin panel like this https://site.local/sitecore and it worked remember every request in sitecore 9.1 needs to be in secure SSL so use ...
Fahad's user avatar
  • 61
6 votes
Accepted

How can I get SXA login working with my Federated Authentication via IdentityServer?

So after some back and forth with Sitecore Support, this is the conclusion and the solution. The fact that SXA ends up in the endless loop has been registered as a bug. Bug reference number #349107. ...
Mark Cassidy's user avatar
  • 25.3k
5 votes
Accepted

Sitecore 9.1 IdentityServer AzureAD subprovider user cannot login to the Admin site

https://sitecore.derekc.net/setting-up-azure-active-directory-integration-with-sitecore-identity-server-sitecore-9-1/ might have your solution -- he writes: "just 'cuz you're in AD, doesn't mean ...
G Killian's user avatar
  • 1,309
5 votes
Accepted

Troubleshooting Sitecore Identity Server routing errors in Sitecore 9

SitecoreIdentityServer in the URL /identity/login/shell/SitecoreIdentityServer is just an identity provider name which is configured in Sitecore.Owin.Authentication.IdentityServer.config. It should be ...
Gobinath Saminathan's user avatar
5 votes
Accepted

Getting IDX20803 when trying to log in via IdentityServer on my CD instance

Turns out, when Sitecore sets up these instances, it does some variable replacement in various config files. On CM, the file Sitecore.Owin.Authentication.IdentityServer.config gets this replacement (...
Mark Cassidy's user avatar
  • 25.3k
5 votes
Accepted

Sitecore Context User issue with Preview mode via Sitecore Identity Server

I had a similar issue and the following page from the documentation pointed me in the right direction: https://doc.sitecore.com/developers/93/sitecore-experience-manager/en/understanding-sitecore-...
Sebastian Lay's user avatar
4 votes
Accepted

Where can I change the Certificate Thumbprint from a Sitecore IdentityServer website?

It looks like there is an XML instead of a config file on which we can do it. website.identityserver\Config\production\Sitecore.IdentityServer.Host.xml <Settings> <Sitecore> ...
Hugo Santos's user avatar
  • 2,311
4 votes
Accepted

Sitecore Logged In Pipeline in Identity Server?

I've figured out the answer based on the comment from @Gobinath and answer of this thread. So, first you must add NEW config for these Owin and IdentityServer stuffs and don't touch your previous ...
purnadika's user avatar
  • 367
4 votes

Login with multiple Identity Providers at the same time

using different domains for front- and backend is the most simple one. Cookies won't be shared between those domains.
Bas Lijten's user avatar
  • 1,857
4 votes
Accepted

Identity-Server with ADFS and OpenID

I have actually blogged about how to implement this, though I am using Sitecore 9.3 in my scenario (I believe this should work in 9.2 as well) You need to do the following: Create a Sitecore Host ...
Julius A's user avatar
  • 752
4 votes

Sitecore CM login not redirecting to identity server

Please follow the below steps: Go to the certificates -> personal certificates Right-click on the identity server certificate Click on All Tasks -> Manage Private Keys Check if the identity app ...
Swati Gupta's user avatar
  • 3,135
3 votes
Accepted

Tenant Service not working

This generally happens when your Sitecore instances doesn't have SSL binding enabled. This is happening because the Tenant Service is using the Sitecore Client Services RESTful API to authenticate ...
nsgocev's user avatar
  • 762
3 votes
Accepted

Why is SignInProcessor triggered twice?

If you issued a redirect with second parameter being default, true, this explains it. What happens in default is, the redirect gets called and then throws an exception to stop further processing. ...
Mark Cassidy's user avatar
  • 25.3k
3 votes
Accepted

IsAdministrator is "sticky" and never gets cleared, once set

Not much of an answer, but I can say that this has been confirmed as a bug. As of Sitecore version 9.2, this is still unresolved. I just followed up, and there is no official bug reference for this. ...
Mark Cassidy's user avatar
  • 25.3k
3 votes

Getting IDX20803 when trying to log in via IdentityServer on my CD instance

Check that your Sitecore license file in the identity server is not expired I had the same symptoms, but locally, the fix ended up being my sitecore license file stored in the identity server had ...
raterus's user avatar
  • 131
3 votes
Accepted

Configuration patching not working in Identity Server

Your patch file is at incorrect location, folder structure should be like - in your case error is here - put config folder inside your environment folder, such as sitecoreruntime > production > ...
Mahendra Shekhawat's user avatar
3 votes
Accepted

Anti-forgery error when opening Identity Server

So it is stating that your AntiforgeryOptions.Cookie.SecurePolicy is set to Always. This means, that for the cookie to be provided to the client, the request has to start on HTTPS and stay on HTTPS. ...
Shane Welsh's user avatar
3 votes
Accepted

Sitecore 9.3 federated authentication onPrem Active Directory

Sitecore 9.3 will not work with Active Directory Module directly. In Sitecore 8.2, the AD module allows you to sync the AD on-prem users into Sitecore. This is no longer possible in Sitecore 9.3 In ...
Julius A's user avatar
  • 752
3 votes

SItecore Identity Server on Prem throws" Error: An error occured"

I am facing the same issue with Sitecore 9.1, in summary the issue is Sitecore not being able to handle long ticket in Core database Sitecore has a cleanup task that should take care of cleaning the ...
Vinicius Deschamps's user avatar
3 votes

SItecore Identity Server on Prem throws" Error: An error occured"

If using SPE you can clear up all or even for a specific user. I'm using Sitecore 9.3 and still see this issue happening. Import-Function -Name Invoke-SqlCommand $connection = [Sitecore.Configuration....
Michael West's user avatar
  • 18.2k
3 votes

Identity Server logs clean-up

If you want to do at Sitecore level only then you can add entry for IdentityServer log folder in <agent type="Sitecore.Tasks.CleanupAgent" of CM website but make sure you give delete ...
Surya Narayan's user avatar
3 votes
Accepted

Identity Server logs clean-up

Identity Server uses Serilog (https://github.com/serilog/serilog) for writing logs and a single file sink is configured by default. Which retains 31 files (for one month) by default. If you want to ...
Surya Narayan's user avatar
3 votes

Migrate existing Owin implementation from pre-Sitecore 9

As already mentioned by Mark the best way is to use configuration from Sitecore. Keep in mind the following parts: IdentityProvidersProcessor -- here you can set your authentication settings and ...
Danny Paul's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible