Try our conversational search powered by Generative AI!

multiple login provider for multi-site in EPiServer-DXC

Vote:
 

I am working on a project where requirement is to have multiple external login provider for each site, in multi-site environment of EPiServer - DXC. Since there is only one web.config file, we are facing difficulty to identify the approach for authentication.

One approach that I can think is to have multiple website. Any other approach ?

Thanks,

-Avin

#180961
Aug 03, 2017 6:23
Vote:
 

I don't know about DXC, but in on-prem scenario i used the multiplexingprovider, where you can hook up to 10 providers

https://world.episerver.com/documentation/developer-guides/CMS/security/Authentication-and-authorization/

This pattern may be legacy though...

Regards Luc

#180999
Aug 04, 2017 15:30
Vote:
 

Hi Avin.

I would not recommend to spin up seperate sites (Episerver instances with isolated wwwroots and application pools) simply because of your desire to authenticate against different authentication providers.

If you're using ASP.NET Membership, you should instead consider implementing a more clever version of the MultiplexingProvider, which can relay your authentication operation to a designated MembershipProvider according to the active multi-site. Alternatively, if you're using OWIN for authentication, you can rely on the "provider" option as part of your authentication challenges.

Hope that gave you some direction.

/Casper Aagard Rasmussen

 

#181000
Aug 04, 2017 17:53
Vote:
 

To add to my answer above. Spinning up additional Web Apps as part of DXC Service also has a license impact.

/Casper Aagaard Rasmussen

#181004
Aug 04, 2017 19:47
Vote:
 

Hello Avin

These links may provide the answer you are looking for:

https://hacksbyerik.wordpress.com/2017/05/11/mixed-mode-owin-authentication-for-episerver-editors/

http://world.episerver.com/documentation/items/developers-guide/episerver-cms/8/security/mixed-mode-owin-authentication/

David

#181005
Aug 04, 2017 22:34
* You are NOT allowed to include any hyperlinks in the post because your account hasn't associated to your company. User profile should be updated.