Use external authentication providers with user groups

Overview

You can use external authentication providers, such as AD FS, Entra ID (formerly Azure AD), and social media authentication providers, such as Google and Facebook, to authenticate users belonging to user groups.
For more information, see Configure external identity providers.

When using external authentication providers, Sitefinity CMS receives account properties, such as the account email, from the external provider and creates a corresponding Sitefinity CMS user account, using these properties.

Map users from an external authentication provider to Sitefinity CMS user groups

You can select the user groups, which Sitefinity CMS uses, for every user account that comes from an external provider. This way, you automate the mapping between users from an external authentication provider and Sitefinity CMS user groups, thus assigning these accounts to the sites that use the specified user groups.

To do this, perform the following:

  1. Open the Sitefinity CMS backend
  2. Navigate to Settings » Advanced » Authentication » SecurityTokenService » AuthenticationProvider » <name of your provider>
  3. In the Data provider input field, enter the name of an existing user group.

Create an automatic mapping between users from an external authentication provider and Sitefinity CMS roles

You use this procedure to select the roles that Sitefinity CMS automatically assigns to every user account from an external provider. This way, you automate the mapping between users from an external authentication provider and Sitefinity CMS roles. For example, you may assign all users, authenticated via Entra ID, to the BackendUsers role and all users, authenticated via social login, to the Users role.

To do this, perform the following:

  1. In Sitefinity CMS backend, navigate to Settings » Advanced.
  2. In the tree on the left, click Authentication » SecurityTokenService » AuthenticationProvider » <name of your provider>
  3. In the Auto assigned roles input field, enter the names of existing roles.

If you do not create this automatic mapping, you will need to manually assign a role to every account, after your visitors have logged in, using an external account provider.

Increase your Sitefinity skills by signing up for our free trainings. Get Sitefinity-certified at Progress Education Community to boost your credentials.

Get started with Integration Hub | Sitefinity Cloud | Sitefinity SaaS

This free lesson teaches administrators, marketers, and other business professionals how to use the Integration hub service to create automated workflows between Sitefinity and other business systems.

Web Security for Sitefinity Administrators

This free lesson teaches administrators the basics about protecting yor Sitefinity instance and its sites from external threats. Configure HTTPS, SSL, allow lists for trusted sites, and cookie security, among others.

Foundations of Sitefinity ASP.NET Core Development

The free on-demand video course teaches developers how to use Sitefinity .NET Core and leverage its decoupled architecture and new way of coding against the platform.

Was this article helpful?