12
votes
Accepted
Custom Error message when a User account get locked
It is possible to implement in two ways:
1) Switch to the core database and see the following item:
/sitecore/system/Dictionary/Y/Your login attempt was not successful Please try again
You can ...
- 4,113
10
votes
Accepted
How to deep link into Experience Editor so that user is redirected after login?
Instead of linking to an item with an id parameter, instead link to the full item URL with sc_mode=edit parameter set, e.g.
{cmsHost}/path/to/item-page?sc_lang={itemLanguage}&sc_version={...
- 13.8k
10
votes
Accepted
Login programmatically in Sitecore 8.2
You have redirect user to "/sitecore" instead. You will also need to create the cookie by calling createticket function. Here's a snippet of what should be called after AuthenticationManager.Login.
...
- 1,792
9
votes
Accepted
How to make calls to sdn.sitecore.net startpage.aspx over HTTPS?
You can update the Login.SitecoreUrl config setting to point to an https url, the login page uses this setting as the src of the iframe:
<configuration xmlns:set="http://www.sitecore.net/xmlconfig/...
- 13.8k
8
votes
Accepted
Can logins in Sitecore be configured to be Case sensitive?
No.
There is no out of the box setting for this. In general, the overall consensus on the web is - that having usernames such as user1, UsEr1, USER1 in your membership database is... should we say "...
- 25k
8
votes
Locked out Sitecore users cannot reset their password: Sitecore Password Recovery
Long story short; this is expected behaviour (almost). And I'll explain why.
Imagine yourself an admin of the solution and, for whatever reason, you've decided to lock sitecore\billg out of the ...
- 25k
7
votes
Accepted
Restricting access to particular page returns 404 instead of redirecting to login
Yep, it's a bug, if I have time I'll report to Sitecore.
So the solution is to create your own CustomItemResolver that inherits from ItemResolver. override the Process method, call the base.Process(...
- 403
7
votes
MVC equivalent of SecurityCheck Pipeline Processor
Like Mark Cassidy mentioned above, <mvc.requestBegin> would be a close "equivalent". I ran into a similar situation wanting non-authenticated users to be redirected to the <site loginPage="/...
- 1,651
6
votes
Accepted
Unable to login to sitecore CM
One reason for this behavior may be having an httpCookies domain setting in web.config that doesn't match the domain you are using to login to the Sitecore client, or having httpCookies requireSSL set ...
- 156
5
votes
Accepted
How can I use xDB contact to login users?
Once you log the user in, you can process some out of the box Sitecore facets or your custom ones.
Setting the user's info in xDB
[HttpPost]
[AllowAnonymous]
public ActionResult Login(LoginModel ...
- 13.1k
5
votes
Accepted
Sitecore XC10.1.2 - Invalid_request
Check file in your Identity Server instance:
{siteroot}\Config\production\Sitecore.IdentityServer.Host.xml
and add your Sitecore URL to the AllowedOriginsGroup1 similarly to the example below:
<...
- 3,722
4
votes
MVC equivalent of SecurityCheck Pipeline Processor
The one that mimics it most closely, is the <mvc.requestBegin> pipeline. Essentially, MVC will break off and start processing here, where the traditional would have continued to call <...
- 25k
4
votes
Accepted
How to use the AntiForgeryToken with a custom log-in form?
I found the root of the issue. It was caused by some controller actions, for which:
Either the [ValidateRenderingToken] attribute was missing;
Or the [ValidateRenderingToken] attribute was added ...
- 12.6k
4
votes
Accepted
Make Azure AD Login Page The Default Sitecore Login Page
Yes, you need to set loginPage attribute of shell site to $(loginPath)shell/SitecoreIdentityServer/IdS4-AzureAd.
This will redirect /Sitecore/Login or /Sitecore to AzureAd login page directly
Here is ...
- 1,455
3
votes
Accepted
Access denied page in Sitecore when using requireLogin
For this, you need to configure loginPage but set requireLogin to false.
Your next step will be to remove the access for Everyone on your /sitecore/content/site node and Remove Inheritance. You then ...
- 25k
3
votes
Accepted
Why is SignInProcessor triggered twice?
If you issued a redirect with second parameter being default, true, this explains it.
What happens in default is, the redirect gets called and then throws an exception to stop further processing. ...
- 25k
3
votes
8.1 stopped working after content node deletion. NullReferenceException, Powershell Pipeline Issue?
Answer Based on Comment Thread
Based on your Stack Trace, it appears that while some content items were deleted, potentially, other items needed for the successful operation of the sitecore ...
- 14.6k
3
votes
Accepted
Track Sitecore Login
If you need it per month then the only way I know is to check the Sitecore logs and search for AUDIT (<username>): Login messages. This is only available if you have the logging at INFO level.
...
- 4,283
3
votes
Accepted
How to prevent multiple sessions from same user
Create a new processor to validate a single session on <owin.cookieAuthentication.signedIn> pipeline, if the same username is already logged in on other devices, we kick out the session and then ...
- 3,722
3
votes
Accepted
Correct way to Sign out a user programmatically
As per the Sitecore documentation, the AuthenticationManager.Logout() method does everything automatically.
When a user signs out from an external identity provider, Sitecore Identity redirects the ...
- 4,676
2
votes
Accepted
protected languages -> Redirection
You should check the language as soon as possible - so I would do it in the HTTPRequestBegin pipeline at the languageResolver.
<processor type="Sitecore.Pipelines.HttpRequest.LanguageResolver, ...
- 283
2
votes
Sitecore Single Sign On
There are multiple ways of approaching Single Sign On, entirely dependent on how you plan on managing it. Given you have AD, using the AD module and consulting the documentation there for setting up ...
- 6,751
2
votes
Accepted
Security changes from 6.2 to 8.2
In short
Yep. Just switch to previous machine key.
But be aware
That these were updated for a reason. You should look into a migration scenario, moving your user accounts to a more secure form of ...
- 25k
2
votes
Sitecore restrict users from accessing the page using Sitecore security
I think you are restricting the wrong domain. In your code you are checking against the Sitecore domain but you said you are accessing the page as a webpage which by default uses the Extranet domain.
...
- 5,678
2
votes
Sitecore login page returns 403 - Forbidden: Access is denied after HTTPS is enabled
The reason that I couldn't get access to the Sitecore Login page was that setting up HTTPS through Amazon load balancer placed the CMS behind the load balancer gate as well. I didn't add the IP of the ...
- 121
2
votes
Unable to access Launchpad following Sitecore 8.2 Install
We solved this issue, there was nothing wrong with the Sitecore installation or the databases.
The above behavior was being seen whilst connected to a web server via remote desktop and the site was ...
- 501
2
votes
Not able to navigate to return url from SXA login component
It started working when I clear the DestinationUrl field in the Login metadata item (/sitecore/content/Test/Tenant/Site/Data/Security/Login)
- 581
2
votes
Accepted
How to enable custom hashing algorithm on identity server?
You need to create a new Identity Server plugin.
I used Sitecore.Plugin.Authentication.SameSite as an example. Duplicate the folder sitecore\Sitecore.Plugin.Authentication.SameSite and give it a new ...
- 5,432
2
votes
Can SC_TICKET* keys be purged from the Properties table, and have tickets been moved elsewhere?
I know this is kinda old now, and just to supplement @GeorgeTucker's response, here is a maintenance script I have been using for this cleanup. Basically these tickets control the "Remember Me" ...
- 2,198
2
votes
Sitecore redirects to no-access page instead of login page
Here we are going to discuss request specific authentication if user manually going to any login related page using URL manipulation, we can redirect user to login/access denied page.
If website has ...
- 1,484
Only top scored, non community-wiki answers of a minimum length are eligible