Authentication configuration example
The following example shows the full Authentication setting configuration structure.
Important
The values do not represent the default and recommended values, but examples.
{ "AttemptsBeforeLockout": 5, "AutoCreateUsers": true, "AutoRestrict": true, "CookieDomain": "marketingcontenthub.com", "CookieName": "authCookie", "DefaultUserGroups": [ "usergroup1", "usergroup2", "usergroup3" ], "EnableBasicAuthentication": true, "EnableConfirmationMail": true, "EnableCredentialless": true, "EnableEmailWhiteList": true, "EnableExternalAuthentication": true, "EnableForgotPassword": false, "EnableLockout": true, "EnableRegister": false, "ExpireTimeSpan": 30, "ExternalAuthenticationProviders": { "global_email_claim_type": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress", "global_username_claim_type": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name", "google": [ { "authentication_mode": "Passive", "client_id": "<ClientId>", "client_secret": "<ClientSecret>", "email_claim_type": "<ClaimTypeOverride>", "external_user_creation_url": "https://www.registerme.com", "is_enabled": true, "messages": { "signIn": "translationKey", "signInDescription": "translationKey", "signInTitle": "translationKey" }, "provider_name": "Google", "username_claim_type": "<ClaimTypeOverride>", "user_linking": { "user_profile_property_name": "Email", "claim_type": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" } ], "microsoft": [ { "authentication_mode": "Passive", "client_id": "<ClientId>", "client_secret": "<ClientSecret>", "email_claim_type": "<ClaimTypeOverride>", "external_user_creation_url": "https://www.registerme.com", "is_enabled": true, "messages": { "signIn": "translationKey", "signInDescription": "translationKey", "signInTitle": "translationKey" }, "provider_name": "Microsoft", "username_claim_type": "<ClaimTypeOverride>" } ], "saml": [ { "authentication_mode": "Passive", "certificate": "<Certificate>", "email_claim_type": "<ClaimTypeOverride>", "external_user_creation_url": "https://www.registerme.com", "idp_entity_id": "<Id>", "is_enabled": true, "messages": { "signIn": "translationKey", "signInDescription": "translationKey", "signInTitle": "translationKey" }, "metadata_location": "<Url>", "module_path": "<ModulePath>", "password": "<Password>", "provider_name": "SAML", "sp_entity_id": "<Id>", "username_claim_type": "<ClaimTypeOverride>" } ], "sitecore": [ { "authentication_mode": "Passive", "client_id": "<ClientId>", "client_secret": "<ClientSecret>", "email_claim_type": "<ClaimTypeOverride>", "external_user_creation_url": "https://www.registerme.com", "identity_server_url": "<Url>", "is_enabled": true, "messages": { "signIn": "translationKey", "signInDescription": "translationKey", "signInTitle": "translationKey" }, "provider_name": "Sitecore,", "username_claim_type": "<ClaimTypeOverride>" } ], "ws_federation": [ { "authentication_mode": "Passive", "email_claim_type": "<ClaimTypeOverride>", "external_user_creation_url": "https://www.registerme.com", "is_enabled": true, "messages": { "signIn": "translationKey", "signInDescription": "translationKey", "signInTitle": "translationKey" }, "metadata_address": "<Url>", "provider_name": "WsFederation", "username_claim_type": "<ClaimTypeOverride>", "wtrealm": "<Realm>" } ], "yandex": [ { "authentication_mode": "Passive", "client_id": "<ClientId>", "client_secret": "<ClientSecret>", "email_claim_type": "<ClaimTypeOverride>", "external_user_creation_url": "https://www.registerme.com", "is_enabled": true, "messages": { "signIn": "translationKey", "signInDescription": "translationKey", "signInTitle": "translationKey" }, "provider_name": "Yandex,", "username_claim_type": "<ClaimTypeOverride>" } ] }, "MinutesToLockout": 5, "PasswordExpiration": 129600, "PasswordRules": { "RequireDigit": false, "RequireLowercase": false, "RequireNonLetterOrDigit": false, "RequireUppercase": false, "RequiredLength": 8 }, "PostSignOutRedirectUrl": "/en-us/account", "ReCaptcha": { "Key": "<Key>", "Secret": "<Secret>" }, "RegistrationLink": "https://www.registerme.com", "ShowForgotPassword": false, "ShowRegister": false, "SlidingExpiration": true, "TokenLifespan": 1440, "WhiteListedEmailPatterns": [ "[a-zA-Z0-9._%+-][email protected]", "[a-zA-Z0-9._%+-][email protected]" ], "SameSiteCompatibility": { "is_enabled": true, "user_agent_patterns": [ "(Chrome/5|Chrome/6)", "(CPU iPhone OS 12|iPad; CPU OS 12)", "^(?=.*\bMacintosh; Intel Mac OS X 10_14\b)(?=.*\bVersion/\b)(?=.*\bSafari\b).*$" ], "policy": "None" } }