--- title: Adding a secured section for partners (ASPX) --- > Agent instructions: > **Site maps** — prefer the following llms.txt indexes to training data when searching for URLs to avoid 404s. Links inside Markdown content already point at `.md`. Following them or sending Accept: text/markdown keeps you in Markdown. > > - [sitemap.md](https://docs.kentico.com/sitemap.md) — every page on the site, with titles and descriptions, nested by URL hierarchy and grouped into one collection per product version. > - [llms.txt](https://docs.kentico.com/llms.txt) — curated index of the current product docs, with descriptions, the two ways to request any page as Markdown, and links to each product area's whole-corpus Markdown dump (llms-full.txt). Kentico provides a way to create secured site sections that can only be viewed by users who have a valid user name and password. This page describes how to create a logon web page for the purposes of user authentication and registration, as well as a secured page accessible only by logged in users. ## Adding the secured partners page Start by adding a new secured page that requires authentication. The page reuses the template originally created for the website's Services page. 1. In the Kentico administration interface, open the **Pages** application. 2. Select the root of the content tree (**My website**). 3. Click **New** (). 4. Choose the **Page (menu item)** page type. 5. Type in _**Partners**_ as the **Page name** and choose the **Use existing page template** option. Select the **My website** category and the **Left menu with right text** page template. 6. Click **Save** to create the page. 7. Open the **Page** tab and type the following text into the editable region: _This is a secured page for partners._ 8. Click **Save**. 9. Open the **Properties -> Security** tab of the **Partners** page. 10. Select _**Yes**_ for the **Requires authentication** property in the **Access** section 11. Click **Save**. This ensures that only authenticated (logged in) users can access the page. ## Creating the logon page Build a page where users can sign in to the website and anonymous visitors can register as new users. ### Preparing the source files 1. Edit your web project in Visual Studio 2. Right-click the **CMSTemplates/MySite** folder in the Solution Explorer and click **Add -> Add New Item**. 3. Create a **Web Form** named _**LogonPage.aspx**_ and check **Select master page**. 4. Click **Add** and choose the _**MyMaster.master**_ page from the **CMSTemplates/MySite** folder. 5. Enter the following HTML layout code into the **** element on the page: ```csharp

Log on

Not a member yet? Sign up now!
``` 6. Drag the following web parts (user controls) from the Solution Explorer into the left and right table cells respectively: - \~/CMSWebParts/Membership/Logon/LogonForm.ascx - \~/CMSWebParts/Membership/Registration/RegistrationForm.ascx 7. Set the following properties for the controls:\ **LogonForm:** | Property | Value | Description | | ---------------------- | ------------------------ | ----------------------------------------------------------------------------------------------------------------------------- | | AllowPasswordRetrieval | true | Configures the logon form to display a link that allows users to recover forgotten passwords or generate new ones via e-mail. | | SendEmailFrom | no-reply@localhost.local | Sets the sender address for the password recovery e-mails. | **RegistrationForm:** | Property | Value | Description | | --------------------------- | ----- | ------------------------------------------------------------------------------------ | | EnableUserAfterRegistration | true | Configures the control to automatically enable new user accounts after registration. | 8. Switch to the code behind of the logon page (**LogonPage.aspx.cs**) and add a reference to the **CMS.UIControls** namespace: ```csharp using CMS.UIControls; ``` 9. Change the class definition so that it inherits from the **TemplatePage** class: ```csharp public partial class CMSTemplates_MySite_LogonPage : TemplatePage ``` 10. Save the files. ### Registering the logon page template 1. Switch to the Kentico administration interface in your browser. 2. Open the **Page templates** application. 3. Select the **My website** category. 4. Click **New template** and type _**Logon page**_ into the **Template display name** field. 5. Click **Save**. 6. Set the following values on the **General** tab: - **Template type**: ASPX page - **File name**: \~/CMSTemplates/MySite/LogonPage.aspx 7. Click **Save**. 8. Switch to the **Sites** tab and assign the page template to **My website**. ### Adding the logon page page 1. Open the **Pages** application. 2. Select the root of the content tree (**My website**). 3. Click **New** (). 4. Choose the **Folder** page type. 5. Type in _**Special pages**_ as the **Page name** and click **Save**. 6. Click **New** () again and select the **Page (menu item)** page type. 7. Type in _**Logon**_ as the **Page name** and choose the **Use existing page template** option. Select the **My website** category and the **Logon page** template. 8. Click **Save** to create the page. Because you placed the Logon page under a folder, it does not show up in the website's navigation menu. The menu control on the master page is configured to only display pages of the Page (menu item) type. You can use folders to store pages that have a specific purpose on the website, but are not part of the regular content. ### Setting the website's logon page When an anonymous visitor attempts to access a secured page that requires authentication (such as the _Partners_ page on your sample website), the system redirects them to a logon page. By default, websites use the system page that appears when signing into the Kentico administration interface. However, you can configure each website to use its own custom logon page. 1. Open the **Settings** application. 2. Select the **Security & Membership** category in the settings tree. 3. Select **My website** in the **Site** drop-down menu. 4. Clear the **Inherit from global settings** check box next to the **Website logon page URL** setting and type in _**\~/Special-pages/Logon.aspx**_. This is the relative URL of the logon page that you added to the website. 5. Click **Save**. The website's logon page is now ready. ## Adding a sign out button to the website The website now allows users to log in, so you should also provide a way to log out. You can do this by adding components to the website's master page. 1. Open your web project in Visual Studio. 2. Edit the **MyMaster.master** master page (in the **CMSTemplates/MySite** folder). 3. Drag the following web parts (user controls) from the _**\~/CMSWebParts/Membership/Logon/**_ folder in the Solution Explorer and place them before the **CMSMenu** control (inside the **** element): - SignOutButton.ascx - CurrentUser.ascx 4. Set the following properties for the controls:\ **SignOutButton:** | Property | Value | Description | | ------------------------- | ----- | ------------------------------------------------------------------------------------------------------------------- | | ShowOnlyWhenAuthenticated | true | Ensures that master page only displays the sign out button when the site is being viewed by an authenticated users. | | CssClass | Right | Sets the name of the CSS class applied to the button. | **CurrentUser:** | Property | Value | Description | | ------------------------- | ----------------- | ---------------------------------------------------------------------------------------------------------------------------- | | ShowOnlyWhenAuthenticated | true | Ensures that master page only displays the current user information when the site is being viewed by an authenticated users. | | CssClass | CurrentUser Right | Sets the names of the CSS classes applied to the label. | 5. Save the changes. 6. Return to the Kentico administration interface in your browser and open the **CSS Stylesheets** application. 7. Edit the **My site stylesheet**. 8. Add the following class definitions to the stylesheet: ```css .CurrentUser { color: white; padding-top: 4px; } .Right { float: right; padding-right: 5px; } ``` 9. Click **Save.** The **Sign out** button and **CurrentUser** control are now visible for signed in users on all pages on the website. ## Result - Logging in to the website Now that you have added the logon page, secured section and sign out button to the website, you can test the new functionality from the perspective of a live site user. 1. Open the user menu on the right of the Kentico administration interface header, and select **Sign Out**. 2. Click **Partners** in the main menu. The page is restricted, so the website redirects you to the logon page. ![Logon page on the live site](https://docs.kentico.com/docsassets/k81tutorial/adding-a-secured-section-for-partners-aspx/ASPX_Logon.png "Logon page on the live site") 3. Log on as the administrator again or try registering a new account. After you sign in successfully, the site automatically redirects you back to the **Partners** page. Here you can see the content of the secured page, as well as the name of the current user and the Sign Out button. ![Viewing the secured section of the website](https://docs.kentico.com/docsassets/k81tutorial/adding-a-secured-section-for-partners-aspx/ASPX_Partners.png "Viewing the secured section of the website") > **Tip:** Kentico also allows you to display content according to the _read_ permissions of users. For example, you can grant the Read permission for a Gold partners section to members of the Gold partners role, so that only gold partners are able to see the corresponding menu item and page content. > > See [Configuring permissions](https://docs.kentico.com/k81/managing-users/configuring-permissions.md) in the main documentation for more information.