User registration and authentication

Xperience provides various options that you can use when setting up registration and authentication on your websites.

LIVE SITE – available for the live site.

ADMINISTRATION – available for the Xperience administration application.

ASP.NET Identity authentication LIVE SITE

For the live site, Xperience provides an integration API based on ASP.NET Identity.

The site’s developers need to implement actions that allow visitors to sign in and out of the website with Xperience user accounts.

Third-party authentication services LIVE SITE

Third-party authentication services, such as Facebook, Google, or OpenID, can provide an alternative way for users to sign in and register on your site.

For more information, see Configuring external authentication.

Forms authentication  ADMINISTRATION

Forms authenticationstores user names and passwords in the database and requires users to register on your site before they can sign in.

Multi-factor authentication ADMINISTRATION

Multi-factor authentication uses a combination of forms authentication and one other security factor. For example, a passcode generated by a mobile application or sent by SMS, email, etc.

Windows Active Directory ADMINISTRATION

The Windows AD authentication gets user identity from the network credentials and automatically creates a corresponding user in the database, including the user’s roles (if they exist in the Xperience database). Users are not required to enter their user names and passwords when signing in to the administration interface.

Custom external authentication ADMINISTRATION

If you want to retrieve user and role information from an external source, such as a custom database, you need to write a custom authentication provider. The provider must ensure the submitted user credentials are checked against an external user profile or authentication source. If the user is successfully authenticated, a corresponding user account is automatically created/updated in the Xperience database.

You can integrate a custom authentication provider with the Xperience administration via system security events.