Configure Sitecore Identity Server

Version: 9.0

Configure the Identity Server Instance

To configure the Sitecore Identity Server instance:

  1. On the Sitecore Identity Server instance, open the 
\Config\production\Sitecore.IdentityServer.Host.xml file.

  2. Update the connection string to use the security database as the Data Source:

    <ConnectionString>Data Source=.;Initial Catalog=Sitecore.Core;User ID=coreuser;Password=Test12345</ConnectionString>
  3. Ensure that the AllowedCorsOriginsGroup1, and the PasswordRecoveryUrl settings contain the URL of a Sitecore instance:

    <PasswordRecoveryUrl>http://sitecore_instance/sitecore/login?rc=1</PasswordRecoveryUrl>
    <AllowedCorsOriginsGroup1>https://sitecore_instance</AllowedCorsOriginsGroup1>
    Note

    In a scaled environment, these settings must point to a Content Management server.

  4. Ensure that ClientSecret1 is the same as the sitecoreidentity.secret key that you use in the 
\App_Config\ConnectionStrings.config file on the CM instance.

  5. Ensure that any configuration changes you have implemented are reconfigured in separate configuration patch files.

  6. Add any custom plugins to the {SI_server_root_folder}\sitecore\ folder.

  7. Start Sitecore Identity Server.

Configure a Sitecore Identity client

Every Sitecore Experience Platform instance is a client of Sitecore Identity Server, by default. To configure a Sitecore instance to use Sitecore Identity Server for logging in, register Sitecore Identity Server on the instance:

  1. In the Sitecore instance, in file: 
\App_Config\Sitecore\Owin.Authentication.IdentityServer\Sitecore.Owin.Authentication.IdentityServer.config

    In the identityServerAuthority variable, set the URL of the Sitecore Identity Server:

    <sc.variable name="identityServerAuthority"value="https://SitecoreIdentityServerHost" />

  2. Restart the Sitecore instance.

If you have suggestions for improving this article, let us know!