47
votes
Accepted
Installing 9.1 XP0 - Sorry, there was an error : unauthorized_client
After speaking with my friend @kamsar, he pointed out the CORS origin on the Identity Server Instance needs an update.
The Identity Server doesn't allow logging in from just any url, for security ...
- 18.6k
11
votes
Accepted
Where is the License file location for Identity Server in Sitecore 9.1?
In Sitecore 9.1 license file for Identity Server is kept in
sitecoreruntime\license.xml
Just replace the file with your license and restart the app.
- 24.2k
9
votes
Accepted
use external application to get Identity Server token / cookie
With some serious Googling, and with the help of the Community and this gist I was able to successfully get a token from Sitecore 9.1's Identity Server.
First, you need to add a new Client to the ...
- 551
9
votes
Accepted
How do I map my IdentityServer Claims to CustomProperties on the UserProfile?
I've added a new post on my blog here: https://sitecore.derekc.net/extending-sitecore-identitys-sitecore-profile-to-map-additional-profile-data/. Summary below:
So three steps to add a field that ...
- 783
8
votes
Installing 9.1 XP0 - Sorry, there was an error : unauthorized_client
In addition to Michaels correct answer:
It is also possible to define the AllowedCorsOrigins pipe-separated.
I also stuck on this and found the description in the IdentityServer WDP zip (parameters....
- 496
8
votes
Accepted
IsAdministrator check no longer working on Sitecore 9.1
In 9.1, you need to patch in the path of your custom admin pages to the list of the siteNeutralPaths for the ValidateSiteNeutralPaths processor in the owin.cookieAuthentication.validateIdentity ...
- 2,728
8
votes
Accepted
Can I use Sitecore's Configuration patching mechanics for my Identity Server configuration?
Sitecore Host (the platform Sitecore Identity is built on) does have a "patching" mechanism for configuration files that is an extension of the default ASP.NET Core configuration builder.
When a ...
- 1,255
6
votes
Installing 9.1 XP0 - Sorry, there was an error : unauthorized_client
I tried using https instead of http to access my local sitecore admin panel like this
https://site.local/sitecore and it worked remember every request in sitecore 9.1 needs to be in secure SSL so use ...
- 61
6
votes
Accepted
How can I get SXA login working with my Federated Authentication via IdentityServer?
So after some back and forth with Sitecore Support, this is the conclusion and the solution.
The fact that SXA ends up in the endless loop has been registered as a bug. Bug reference number #349107.
...
- 25.4k
6
votes
Accepted
Getting IDX20803 when trying to log in via IdentityServer on my CD instance
Turns out, when Sitecore sets up these instances, it does some variable replacement in various config files.
On CM, the file Sitecore.Owin.Authentication.IdentityServer.config gets this replacement (...
- 25.4k
5
votes
Accepted
Sitecore 9.1 IdentityServer AzureAD subprovider user cannot login to the Admin site
https://sitecore.derekc.net/setting-up-azure-active-directory-integration-with-sitecore-identity-server-sitecore-9-1/ might have your solution -- he writes:
"just 'cuz you're in AD, doesn't mean ...
- 1,309
5
votes
Accepted
Troubleshooting Sitecore Identity Server routing errors in Sitecore 9
SitecoreIdentityServer in the URL /identity/login/shell/SitecoreIdentityServer is just an identity provider name which is configured in Sitecore.Owin.Authentication.IdentityServer.config. It should be ...
- 1,976
5
votes
Accepted
Sitecore Context User issue with Preview mode via Sitecore Identity Server
I had a similar issue and the following page from the documentation pointed me in the right direction: https://doc.sitecore.com/developers/93/sitecore-experience-manager/en/understanding-sitecore-...
- 312
4
votes
Accepted
Where can I change the Certificate Thumbprint from a Sitecore IdentityServer website?
It looks like there is an XML instead of a config file on which we can do it.
website.identityserver\Config\production\Sitecore.IdentityServer.Host.xml
<Settings>
<Sitecore>
...
- 2,311
4
votes
Accepted
Sitecore Logged In Pipeline in Identity Server?
I've figured out the answer based on the comment from @Gobinath and answer of this thread.
So, first you must add NEW config for these Owin and IdentityServer stuffs and don't touch your previous ...
- 367
4
votes
Login with multiple Identity Providers at the same time
using different domains for front- and backend is the most simple one. Cookies won't be shared between those domains.
- 1,867
4
votes
Accepted
Identity-Server with ADFS and OpenID
I have actually blogged about how to implement this, though I am using Sitecore 9.3 in my scenario (I believe this should work in 9.2 as well)
You need to do the following:
Create a Sitecore Host ...
- 752
4
votes
Sitecore CM login not redirecting to identity server
Please follow the below steps:
Go to the certificates -> personal certificates
Right-click on the identity server certificate
Click on All Tasks -> Manage Private Keys
Check if the identity app ...
- 3,442
3
votes
Accepted
Tenant Service not working
This generally happens when your Sitecore instances doesn't have SSL binding enabled.
This is happening because the Tenant Service is using the Sitecore Client Services RESTful API to authenticate ...
- 762
3
votes
Accepted
Why is SignInProcessor triggered twice?
If you issued a redirect with second parameter being default, true, this explains it.
What happens in default is, the redirect gets called and then throws an exception to stop further processing. ...
- 25.4k
3
votes
Accepted
IsAdministrator is "sticky" and never gets cleared, once set
Not much of an answer, but I can say that this has been confirmed as a bug. As of Sitecore version 9.2, this is still unresolved.
I just followed up, and there is no official bug reference for this. ...
- 25.4k
3
votes
Getting IDX20803 when trying to log in via IdentityServer on my CD instance
Check that your Sitecore license file in the identity server is not expired
I had the same symptoms, but locally, the fix ended up being my sitecore license file stored in the identity server had ...
- 131
3
votes
Accepted
Configuration patching not working in Identity Server
Your patch file is at incorrect location, folder structure should be like -
in your case error is here -
put config folder inside your environment folder, such as sitecoreruntime > production > ...
- 5,266
3
votes
Accepted
Anti-forgery error when opening Identity Server
So it is stating that your AntiforgeryOptions.Cookie.SecurePolicy is set to Always. This means, that for the cookie to be provided to the client, the request has to start on HTTPS and stay on HTTPS. ...
- 141
3
votes
Accepted
Sitecore 9.3 federated authentication onPrem Active Directory
Sitecore 9.3 will not work with Active Directory Module directly. In Sitecore 8.2, the AD module allows you to sync the AD on-prem users into Sitecore. This is no longer possible in Sitecore 9.3
In ...
- 752
3
votes
SItecore Identity Server on Prem throws" Error: An error occured"
I am facing the same issue with Sitecore 9.1, in summary the issue is Sitecore not being able to handle long ticket in Core database
Sitecore has a cleanup task that should take care of cleaning the ...
- 2,999
3
votes
SItecore Identity Server on Prem throws" Error: An error occured"
If using SPE you can clear up all or even for a specific user. I'm using Sitecore 9.3 and still see this issue happening.
Import-Function -Name Invoke-SqlCommand
$connection = [Sitecore.Configuration....
- 18.6k
3
votes
Identity Server logs clean-up
If you want to do at Sitecore level only then you can add entry for IdentityServer log folder in <agent type="Sitecore.Tasks.CleanupAgent" of CM website but make sure you give delete ...
- 1,505
3
votes
Accepted
Identity Server logs clean-up
Identity Server uses Serilog (https://github.com/serilog/serilog) for writing logs and a single file sink is configured by default.
Which retains 31 files (for one month) by default. If you want to ...
- 1,505
3
votes
Migrate existing Owin implementation from pre-Sitecore 9
As already mentioned by Mark the best way is to use configuration from Sitecore.
Keep in mind the following parts:
IdentityProvidersProcessor
-- here you can set your authentication settings
and ...
- 332
Only top scored, non community-wiki answers of a minimum length are eligible