Hot answers tagged

12 votes
Accepted

Custom Error message when a User account get locked

It is possible to implement in two ways: 1) Switch to the core database and see the following item: /sitecore/system/Dictionary/Y/Your login attempt was not successful Please try again You can ...
user avatar
10 votes
Accepted

How to deep link into Experience Editor so that user is redirected after login?

Instead of linking to an item with an id parameter, instead link to the full item URL with sc_mode=edit parameter set, e.g. {cmsHost}/path/to/item-page?sc_lang={itemLanguage}&sc_version={...
user avatar
  • 13.7k
9 votes
Accepted

How to make calls to sdn.sitecore.net startpage.aspx over HTTPS?

You can update the Login.SitecoreUrl config setting to point to an https url, the login page uses this setting as the src of the iframe: <configuration xmlns:set="http://www.sitecore.net/xmlconfig/...
user avatar
  • 13.7k
9 votes
Accepted

Login programmatically in Sitecore 8.2

You have redirect user to "/sitecore" instead. You will also need to create the cookie by calling createticket function. Here's a snippet of what should be called after AuthenticationManager.Login. ...
user avatar
  • 1,752
8 votes

Locked out Sitecore users cannot reset their password: Sitecore Password Recovery

Long story short; this is expected behaviour (almost). And I'll explain why. Imagine yourself an admin of the solution and, for whatever reason, you've decided to lock sitecore\billg out of the ...
user avatar
  • 24.4k
7 votes
Accepted

Restricting access to particular page returns 404 instead of redirecting to login

Yep, it's a bug, if I have time I'll report to Sitecore. So the solution is to create your own CustomItemResolver that inherits from ItemResolver. override the Process method, call the base.Process(...
user avatar
  • 403
7 votes
Accepted

Can logins in Sitecore be configured to be Case sensitive?

No. There is no out of the box setting for this. In general, the overall consensus on the web is - that having usernames such as user1, UsEr1, USER1 in your membership database is... should we say "...
user avatar
  • 24.4k
7 votes

MVC equivalent of SecurityCheck Pipeline Processor

Like Mark Cassidy mentioned above, <mvc.requestBegin> would be a close "equivalent". I ran into a similar situation wanting non-authenticated users to be redirected to the <site loginPage="/...
user avatar
  • 1,651
6 votes
Accepted

Unable to login to sitecore CM

One reason for this behavior may be having an httpCookies domain setting in web.config that doesn't match the domain you are using to login to the Sitecore client, or having httpCookies requireSSL set ...
user avatar
5 votes
Accepted

How can I use xDB contact to login users?

Once you log the user in, you can process some out of the box Sitecore facets or your custom ones. Setting the user's info in xDB [HttpPost] [AllowAnonymous] public ActionResult Login(LoginModel ...
user avatar
  • 12.9k
4 votes

MVC equivalent of SecurityCheck Pipeline Processor

The one that mimics it most closely, is the <mvc.requestBegin> pipeline. Essentially, MVC will break off and start processing here, where the traditional would have continued to call <...
user avatar
  • 24.4k
4 votes
Accepted

How to use the AntiForgeryToken with a custom log-in form?

I found the root of the issue. It was caused by some controller actions, for which: Either the [ValidateRenderingToken] attribute was missing; Or the [ValidateRenderingToken] attribute was added ...
user avatar
4 votes
Accepted

Make Azure AD Login Page The Default Sitecore Login Page

Yes, you need to set loginPage attribute of shell site to $(loginPath)shell/SitecoreIdentityServer/IdS4-AzureAd. This will redirect /Sitecore/Login or /Sitecore to AzureAd login page directly Here is ...
user avatar
4 votes
Accepted

Sitecore XC10.1.2 - Invalid_request

Check file in your Identity Server instance: {siteroot}\Config\production\Sitecore.IdentityServer.Host.xml and add your Sitecore URL to the AllowedOriginsGroup1 similarly to the example below: <...
user avatar
3 votes
Accepted

Access denied page in Sitecore when using requireLogin

For this, you need to configure loginPage but set requireLogin to false. Your next step will be to remove the access for Everyone on your /sitecore/content/site node and Remove Inheritance. You then ...
user avatar
  • 24.4k
3 votes
Accepted

Why is SignInProcessor triggered twice?

If you issued a redirect with second parameter being default, true, this explains it. What happens in default is, the redirect gets called and then throws an exception to stop further processing. ...
user avatar
  • 24.4k
3 votes

8.1 stopped working after content node deletion. NullReferenceException, Powershell Pipeline Issue?

Answer Based on Comment Thread Based on your Stack Trace, it appears that while some content items were deleted, potentially, other items needed for the successful operation of the sitecore ...
user avatar
  • 14.4k
3 votes
Accepted

Track Sitecore Login

If you need it per month then the only way I know is to check the Sitecore logs and search for AUDIT (<username>): Login messages. This is only available if you have the logging at INFO level. ...
user avatar
2 votes
Accepted

protected languages -> Redirection

You should check the language as soon as possible - so I would do it in the HTTPRequestBegin pipeline at the languageResolver. <processor type="Sitecore.Pipelines.HttpRequest.LanguageResolver, ...
user avatar
  • 283
2 votes

Sitecore Single Sign On

There are multiple ways of approaching Single Sign On, entirely dependent on how you plan on managing it. Given you have AD, using the AD module and consulting the documentation there for setting up ...
user avatar
  • 6,501
2 votes
Accepted

Security changes from 6.2 to 8.2

In short Yep. Just switch to previous machine key. But be aware That these were updated for a reason. You should look into a migration scenario, moving your user accounts to a more secure form of ...
user avatar
  • 24.4k
2 votes

Sitecore restrict users from accessing the page using Sitecore security

I think you are restricting the wrong domain. In your code you are checking against the Sitecore domain but you said you are accessing the page as a webpage which by default uses the Extranet domain. ...
user avatar
  • 5,636
2 votes

Sitecore login page returns 403 - Forbidden: Access is denied after HTTPS is enabled

The reason that I couldn't get access to the Sitecore Login page was that setting up HTTPS through Amazon load balancer placed the CMS behind the load balancer gate as well. I didn't add the IP of the ...
user avatar
  • 121
2 votes

Unable to access Launchpad following Sitecore 8.2 Install

We solved this issue, there was nothing wrong with the Sitecore installation or the databases. The above behavior was being seen whilst connected to a web server via remote desktop and the site was ...
user avatar
2 votes

Not able to navigate to return url from SXA login component

It started working when I clear the DestinationUrl field in the Login metadata item (/sitecore/content/Test/Tenant/Site/Data/Security/Login)
user avatar
2 votes

Can SC_TICKET* keys be purged from the Properties table, and have tickets been moved elsewhere?

I know this is kinda old now, and just to supplement @GeorgeTucker's response, here is a maintenance script I have been using for this cleanup. Basically these tickets control the "Remember Me" ...
user avatar
2 votes
Accepted

Azure AD B2C login for endusers

From what I can see, you are probably using Sitecore 9.0 or 9.1. Based on that assumption, your implementation is not correct. For Sitecore 9.0 and 9.1, you should used federated authentication to ...
user avatar
  • 1,847
2 votes
Accepted

How to get Sitecore.Context.User after redirect from Azure ADb2c login?

Updated AdB2CProcessor File public class AzureAdB2CIdentityProviderProcessor : IdentityProvidersProcessor { // App config settings public static string ClientId = Sitecore....
user avatar
  • 1,603
2 votes
Accepted

How to sign in to a single CM node in a load balanced environment

Do you offload SSL on your load balancer for https://test-cm-1.myclient.com and https://test-cm-2.myclient.com? It looks like https is handled on load balancer and requests to your website go with ...
user avatar
2 votes

How to Login or get access to Sitecore CDP Instance?

You can find the official documentation for CDP and Personalize over on the Docs site: https://doc.sitecore.com/cdp/ General Sitecore CDP resources for developers can be found on the Developer Portal ...
user avatar
  • 6,501

Only top scored, non community-wiki answers of a minimum length are eligible