45 votes
Accepted

Installing 9.1 XP0 - Sorry, there was an error : unauthorized_client

After speaking with my friend @kamsar, he pointed out the CORS origin on the Identity Server Instance needs an update. The Identity Server doesn't allow logging in from just any url, for security ...
user avatar
  • 16.4k
11 votes
Accepted

Where is the License file location for Identity Server in Sitecore 9.1?

In Sitecore 9.1 license file for Identity Server is kept in sitecoreruntime\license.xml Just replace the file with your license and restart the app.
user avatar
9 votes
Accepted

use external application to get Identity Server token / cookie

With some serious Googling, and with the help of the Community and this gist I was able to successfully get a token from Sitecore 9.1's Identity Server. First, you need to add a new Client to the ...
user avatar
8 votes
Accepted

How do I map my IdentityServer Claims to CustomProperties on the UserProfile?

I've added a new post on my blog here: https://sitecore.derekc.net/extending-sitecore-identitys-sitecore-profile-to-map-additional-profile-data/. Summary below: So three steps to add a field that ...
user avatar
  • 773
8 votes
Accepted

IsAdministrator check no longer working on Sitecore 9.1

In 9.1, you need to patch in the path of your custom admin pages to the list of the siteNeutralPaths for the ValidateSiteNeutralPaths processor in the owin.cookieAuthentication.validateIdentity ...
user avatar
  • 2,608
7 votes

Installing 9.1 XP0 - Sorry, there was an error : unauthorized_client

In addition to Michaels correct answer: It is also possible to define the AllowedCorsOrigins pipe-separated. I also stuck on this and found the description in the IdentityServer WDP zip (parameters....
user avatar
7 votes
Accepted

Can I use Sitecore's Configuration patching mechanics for my Identity Server configuration?

Sitecore Host (the platform Sitecore Identity is built on) does have a "patching" mechanism for configuration files that is an extension of the default ASP.NET Core configuration builder. When a ...
user avatar
  • 1,206
6 votes
Accepted

How can I get SXA login working with my Federated Authentication via IdentityServer?

So after some back and forth with Sitecore Support, this is the conclusion and the solution. The fact that SXA ends up in the endless loop has been registered as a bug. Bug reference number #349107. ...
user avatar
  • 24.3k
6 votes

Installing 9.1 XP0 - Sorry, there was an error : unauthorized_client

I tried using https instead of http to access my local sitecore admin panel like this https://site.local/sitecore and it worked remember every request in sitecore 9.1 needs to be in secure SSL so use ...
user avatar
  • 61
5 votes
Accepted

Sitecore 9.1 IdentityServer AzureAD subprovider user cannot login to the Admin site

https://sitecore.derekc.net/setting-up-azure-active-directory-integration-with-sitecore-identity-server-sitecore-9-1/ might have your solution -- he writes: "just 'cuz you're in AD, doesn't mean ...
user avatar
  • 1,279
5 votes
Accepted

Troubleshooting Sitecore Identity Server routing errors in Sitecore 9

SitecoreIdentityServer in the URL /identity/login/shell/SitecoreIdentityServer is just an identity provider name which is configured in Sitecore.Owin.Authentication.IdentityServer.config. It should be ...
user avatar
4 votes
Accepted

Getting IDX20803 when trying to log in via IdentityServer on my CD instance

Turns out, when Sitecore sets up these instances, it does some variable replacement in various config files. On CM, the file Sitecore.Owin.Authentication.IdentityServer.config gets this replacement (...
user avatar
  • 24.3k
4 votes

Sitecore Context User issue with Preview mode via Sitecore Identity Server

I had a similar issue and the following page from the documentation pointed me in the right direction: https://doc.sitecore.com/developers/93/sitecore-experience-manager/en/understanding-sitecore-...
user avatar
4 votes

Login with multiple Identity Providers at the same time

using different domains for front- and backend is the most simple one. Cookies won't be shared between those domains.
user avatar
  • 1,847
4 votes
Accepted

Identity-Server with ADFS and OpenID

I have actually blogged about how to implement this, though I am using Sitecore 9.3 in my scenario (I believe this should work in 9.2 as well) You need to do the following: Create a Sitecore Host ...
user avatar
  • 638
3 votes
Accepted

Tenant Service not working

This generally happens when your Sitecore instances doesn't have SSL binding enabled. This is happening because the Tenant Service is using the Sitecore Client Services RESTful API to authenticate ...
user avatar
  • 762
3 votes
Accepted

Where can I change the Certificate Thumbprint from a Sitecore IdentityServer website?

It looks like there is an XML instead of a config file on which we can do it. website.identityserver\Config\production\Sitecore.IdentityServer.Host.xml <Settings> <Sitecore> ...
user avatar
  • 2,211
3 votes
Accepted

Sitecore Logged In Pipeline in Identity Server?

I've figured out the answer based on the comment from @Gobinath and answer of this thread. So, first you must add NEW config for these Owin and IdentityServer stuffs and don't touch your previous ...
user avatar
3 votes
Accepted

Why is SignInProcessor triggered twice?

If you issued a redirect with second parameter being default, true, this explains it. What happens in default is, the redirect gets called and then throws an exception to stop further processing. ...
user avatar
  • 24.3k
3 votes
Accepted

Configuration patching not working in Identity Server

Your patch file is at incorrect location, folder structure should be like - in your case error is here - put config folder inside your environment folder, such as sitecoreruntime > production > ...
user avatar
3 votes
Accepted

Anti-forgery error when opening Identity Server

So it is stating that your AntiforgeryOptions.Cookie.SecurePolicy is set to Always. This means, that for the cookie to be provided to the client, the request has to start on HTTPS and stay on HTTPS. ...
user avatar
3 votes
Accepted

Sitecore 9.3 federated authentication onPrem Active Directory

Sitecore 9.3 will not work with Active Directory Module directly. In Sitecore 8.2, the AD module allows you to sync the AD on-prem users into Sitecore. This is no longer possible in Sitecore 9.3 In ...
user avatar
  • 638
3 votes

Identity Server logs clean-up

If you want to do at Sitecore level only then you can add entry for IdentityServer log folder in <agent type="Sitecore.Tasks.CleanupAgent" of CM website but make sure you give delete ...
user avatar
2 votes
Accepted

Is it possible to have Single Identity server for commerce and CMS?

As you are upgrading from Sitecore Commerce 9.0 follow the upgrade guide. The Sitecore Identity server is included as part of the Sitecore Experience Platform (XP) 9.1 deployment. The following ...
user avatar
2 votes

How to configure Identity Server 2.0.1 (Sitecore 9.1.1) to use Active Directory?

Sitecore 9.1.0 and later uses Identity server and Owin authentication, so Active Directory module is officially not supported. You need to set up the Federated Authentication. Refer the Sitecore ...
user avatar
2 votes

Method not found: 'Void Sitecore.Owin.Authentication.Pipelines.IdentityProviders.IdentityProvidersProcessor..ctor(Sitecore

In Sitecore 9.1, the IdentityProvidersProcessor constructor parameters got changed, you will see additional parameter like ICookieManager, BaseSettings, I missed to use these two parameters on my ...
user avatar
2 votes

CM to Identity Server redirection issue

You can solve the problem by simply forcing all requests on the CM to be on HTTPS by using the following IIS rewrite rule on your CM instance web.config <rule name="HTTP/S to HTTPS Redirect" ...
user avatar
  • 4,735
2 votes
Accepted

Sitecore 9.1 password complexity

After my investigation, it appears that the default configuration of Identity Server is federating the authentication back to the Sitecore Membership of the main Sitecore instance. The default ...
user avatar
2 votes
Accepted

JWT tokens for authentication for 9.1

I finally got back the answer on using the right token for authentication with iDentity server Bearer tokens. For anyone who comes behind, a sharable Postman set of APi calls can be found here. https:...
user avatar
  • 12.9k
2 votes
Accepted

How to create a Sitecore Framework Plugin-based project in Visual Studio

Sitecore Support responded to a ticket I opened with this question. They outlined three steps for creating the project. Create a new Class Library project Add a reference to Sitecore.Framework....
user avatar
  • 96

Only top scored, non community-wiki answers of a minimum length are eligible