---
title: "Configure Sitecore Identity Server"
slug: "configure-sitecore-identity-server"
abstract: ""
---
# Configure Sitecore Identity Server

## Configure the Identity Server Instance

To configure the Sitecore Identity Server instance:

1. On the Sitecore Identity Server instance, open the `…\Config\production\Sitecore.IdentityServer.Host.xml` file.
2. Update the connection string to use the security database as the `Data Source`:

    ```xml
    <ConnectionString>Data Source=.;Initial Catalog=Sitecore.Core;User ID=coreuser;Password=Test12345</ConnectionString>
    ```

3. Ensure that the `AllowedCorsOriginsGroup1`, and the `PasswordRecoveryUrl` settings contain the URL of a Sitecore instance:

    ```xml
    <PasswordRecoveryUrl>http://sitecore_instance/sitecore/login?rc=1</PasswordRecoveryUrl>
    <AllowedCorsOriginsGroup1>https://sitecore_instance</AllowedCorsOriginsGroup1>
    ```

    > [!note]
    > In a scaled environment, these settings must point to a Content Management server.

4. Ensure that `ClientSecret1` is the same as the `sitecoreidentity.secret` key that you use in the `…\App_Config\ConnectionStrings.config` file on the CM instance.
5. Ensure that any configuration changes you have implemented are reconfigured in separate configuration patch files.
6. Add any custom plugins to the `{SI_server_root_folder}\sitecore\` folder.
7. Start Sitecore Identity Server.

## Configure a Sitecore Identity client

Every Sitecore Experience Platform instance is a client of Sitecore Identity Server, by default. To configure a Sitecore instance to use Sitecore Identity Server for logging in, register Sitecore Identity Server on the instance:

1. In the Sitecore instance, in file: `…\App_Config\Sitecore\Owin.Authentication.IdentityServer\Sitecore.Owin.Authentication.IdentityServer.config`

    In the `identityServerAuthority` variable, set the URL of the Sitecore Identity Server:

    `<sc.variable name="identityServerAuthority"value="https://SitecoreIdentityServerHost" />`

2. Restart the Sitecore instance.