Prev Next |
In Live Validation Mode, only groups are copied from the directory to Sitecore. Entries in /sitecore/users/temporary are created when Users log in and only removed if they log off using the appropriate Sitecore features. If a User doesn’t log off correctly (using the Log Off button in the Sitecore Client), the User’s account will be kept in the Sitecore security database. A scheduled task can be used to clear unused accounts from Sitecore, please refer to the “ Schedule Tasks ” Section for more information.
Users are created under the /sitecore/Users/temporary folder in the Security or Extranet database.
Since temporary Users are usual Sitecore Items, they should be treated accordingly.
Use Live Validation Mode if:
- Single-Sign-On is required.
- A User should log in to Sitecore using Windows account security credentials.
- It is required to Maintain Sitecore roles in Active Directory.
In Live Validation mode, a User must only be created in Active Directory and included in a group. Afterwards, the User can login to Sitecore with one’s domain account.
Limitation:
- No settings can be applied to a particular User (for instance, the Start Url setting can't be applied to a User in Live Validation mode. Thus it's impossible to define in which mode the User logs in to Sitecore), since only groups, and not Users are copied to Sitecore in this mode.
Instructions specific to Live Validation Mode:
- Change the domain assembly in /web.config as described under Installation .
- NOTE: Live Validation Mode allows only the LDAP password.
Prev Next