Default authentication

The Default protocol uses claims authentication and allows implementing single sign-on and access control for modern web applications and APIs. It supports OAuth2's authorization code, implicit, and resource owner password credentials flows. For machine to machine communication you can use Access Keys which is the alternative to client credentials flow. For more information, see Generate access key. This integration allows easy connection with clients such as mobile, web, SPAs, and desktop applications. It is also extensible and allows integration in new and existing architectures.

The authentication is designed and implemented as separate Microsoft OWIN / Katana component. It uses standard Microsoft.Owin.Security libraries-. Additionally, there are some extensions to support external provider logins, such as Facebook or LinkedIn.

This section contains

Configure Oauth2

If you want to provide access to third party application, you can configure Sitefinity to use the OAuth 2.0 protocol.

Custom authentication

Setup custom authentication

Want to learn more?

Enhance your Sitefinity skills by enrolling in free training sessions. Become Sitefinity certified through Progress Education Community to strengthen your professional credentials.

Get started with Integration Hub | Sitefinity Cloud

This free lesson teaches administrators, marketers, and other business professionals how to use Sitefinity Integration Hub to create automated workflows between Sitefinity and other business systems.

Web Security for Sitefinity Administrators

This free lesson teaches administrators the basics about protecting your Sitefinity instance and your sites from external threats. Configure HTTPS, SSL, allow lists for trusted sites, and cookie security, among others.

Foundations of Sitefinity ASP.NET Core Development

The free on-demand video course teaches developers how to use Sitefinity ASP.NET Core and take advantage of its decoupled architecture and modern development model.