Configuring Sitecore Identity server

The Sitecore Identity server only works with HTTPS, and you must generate a certificate for it.

The Sitecore Identity server configuration requires the following additional parameters:

• allowedCorsOrigins – a pipe-separated list of instances (URLs) that are allowed to login via Sitecore Identity. This can be a Sitecore instance in the XP0 topology, or all the CM/CD servers in a scaled environment.

• ClientSecret – a random string value that must be identical on both the client and server side.

  • On the client side, it is stored in the connection strings on the CM server – sitecoreidentity.secret.
  • On the server side, it is stored in the <IdentityServer folder>\ Config\production\Sitecore.IdentityServer.Host.xml file, in the ClientSecrets node.

• PasswordRecoveryUrl – the client URL (CM server).

  If a user forgets their password, they are redirected to the appropriate Sitecore server to fill in the form for password recovery.

You must also register the Identity server on the client side. The Identity server is configured in the \App_Config\Sitecore\Owin.Authentication.IdentityServer\Sitecore.Owin.Authentication.IdentityServer.config configuration file –sc.variable “identityServerAuthority”.

Depending on whether encrypted communication was configured on SQL Server, update the connection string of the Security database to use Encrypt and TrustServerCertificate parameters with appropriate values.

For more information see the Sitecore Identity Server Installation and Upgrade Guide, version 8.0 and Sitecore Identity documentation.