Authentication configuration example

The following example shows the full Authentication setting configuration structure.

Important

The values do not represent the default and recommended values, but examples.

RequestResponse
{
  "AttemptsBeforeLockout": 5,
  "AutoCreateUsers": true,
  "AutoRestrict": true,
  "CookieDomain": "marketingcontenthub.com",
  "CookieName": "authCookie",
  "DefaultUserGroups": [
    "usergroup1",
    "usergroup2",
    "usergroup3"
  ],
  "EnableBasicAuthentication": true,
  "EnableConfirmationMail": true,
  "EnableCredentialless": true,
  "EnableEmailWhiteList": true,
  "EnableExternalAuthentication": true,
  "EnableForgotPassword": false,
  "EnableLockout": true,
  "EnableRegister": false,
  "ExpireTimeSpan": 30,
  "ExternalAuthenticationProviders": {
    "global_email_claim_type": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress",
    "global_username_claim_type": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name",
    "google": [
      {
        "authentication_mode": "Passive",
        "client_id": "<ClientId>",
        "client_secret": "<ClientSecret>",
        "email_claim_type": "<ClaimTypeOverride>",
        "external_user_creation_url": "https://www.registerme.com",
        "is_enabled": true,
        "messages": {
          "signIn": "translationKey",
          "signInDescription": "translationKey",
          "signInTitle": "translationKey"
        },
        "provider_name": "Google",
        "username_claim_type": "<ClaimTypeOverride>",
        "user_linking": {
            "user_profile_property_name": "Email",
            "claim_type": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"
      }
    ],
    "microsoft": [
      {
        "authentication_mode": "Passive",
        "client_id": "<ClientId>",
        "client_secret": "<ClientSecret>",
        "email_claim_type": "<ClaimTypeOverride>",
        "external_user_creation_url": "https://www.registerme.com",
        "is_enabled": true,
        "messages": {
          "signIn": "translationKey",
          "signInDescription": "translationKey",
          "signInTitle": "translationKey"
        },
        "provider_name": "Microsoft",
        "username_claim_type": "<ClaimTypeOverride>"
      }
    ],
    "saml": [
      {
        "authentication_mode": "Passive",
        "certificate": "<Certificate>",
        "email_claim_type": "<ClaimTypeOverride>",
        "external_user_creation_url": "https://www.registerme.com",
        "idp_entity_id": "<Id>",
        "is_enabled": true,
        "messages": {
          "signIn": "translationKey",
          "signInDescription": "translationKey",
          "signInTitle": "translationKey"
        },
        "metadata_location": "<Url>",
        "module_path": "<ModulePath>",
        "password": "<Password>",
        "provider_name": "SAML",
        "sp_entity_id": "<Id>",
        "username_claim_type": "<ClaimTypeOverride>"
      }
    ],
    "sitecore": [
      {
        "authentication_mode": "Passive",
        "client_id": "<ClientId>",
        "client_secret": "<ClientSecret>",
        "email_claim_type": "<ClaimTypeOverride>",
        "external_user_creation_url": "https://www.registerme.com",
        "identity_server_url": "<Url>",
        "is_enabled": true,
        "messages": {
          "signIn": "translationKey",
          "signInDescription": "translationKey",
          "signInTitle": "translationKey"
        },
        "provider_name": "Sitecore,",
        "username_claim_type": "<ClaimTypeOverride>"
      }
    ],
    "ws_federation": [
      {
        "authentication_mode": "Passive",
        "email_claim_type": "<ClaimTypeOverride>",
        "external_user_creation_url": "https://www.registerme.com",
        "is_enabled": true,
        "messages": {
          "signIn": "translationKey",
          "signInDescription": "translationKey",
          "signInTitle": "translationKey"
        },
        "metadata_address": "<Url>",
        "provider_name": "WsFederation",
        "username_claim_type": "<ClaimTypeOverride>",
        "wtrealm": "<Realm>"
      }
    ],
    "yandex": [
      {
        "authentication_mode": "Passive",
        "client_id": "<ClientId>",
        "client_secret": "<ClientSecret>",
        "email_claim_type": "<ClaimTypeOverride>",
        "external_user_creation_url": "https://www.registerme.com",
        "is_enabled": true,
        "messages": {
          "signIn": "translationKey",
          "signInDescription": "translationKey",
          "signInTitle": "translationKey"
        },
        "provider_name": "Yandex,",
        "username_claim_type": "<ClaimTypeOverride>"
      }
    ]
  },
  "MinutesToLockout": 5,
  "PasswordExpiration": 129600,
  "PasswordRules": {
    "RequireDigit": false,
    "RequireLowercase": false,
    "RequireNonLetterOrDigit": false,
    "RequireUppercase": false,
    "RequiredLength": 8
  },
  "PostSignOutRedirectUrl": "/en-us/account",
  "ReCaptcha": {
    "Key": "<Key>",
    "Secret": "<Secret>"
  },
  "RegistrationLink": "https://www.registerme.com",
  "ShowForgotPassword": false,
  "ShowRegister": false,
  "SlidingExpiration": true,
  "TokenLifespan": 1440,
  "WhiteListedEmailPatterns": [
    "[a-zA-Z0-9._%+-][email protected]",
    "[a-zA-Z0-9._%+-][email protected]"
  ]
}

Do you have some feedback for us?

If you have suggestions for improving this article,