Mixed Validation Mode

3. Mixed Validation Mode

Mixed Validation Mode functions as a combination of Live and Replication modes.

Like in Replication mode, user attributes (FullName, Email, etc.) are copied from Active Directory to Sitecore.

If an Active Directory entry contains a field with the name equal to Sitecore user item field, then the field value is copied to a newly created user Item. All other fields are ignored. The exceptions are Administrator field, which is always set to 0 (temporary user should never be an Administrator), and such fields like Wallpaper and Portrait which are hard coded.

Like in Live Validation mode, Users can be authenticated directly against the Active Directory. This allows Users to authenticate with their directory password.

Just like in Replication mode, all Users from one or several groups in the directory are replicated in Sitecore.

Unlike in Live mode, you can apply additional security settings to Users in Sitecore without making those changes in LDAP, which provides for a more flexible CMS configuration.

Mixed mode allows Users to create groups and associate Users from Active Directory with those groups, create Users and associate them with groups from Active Directory.

Each time a User logs on, the cache of their group membership will be updated. Thus you cannot remove a CMS User from roles members of which they are in LDAP.

In Mixed mode, the module authenticates a User against the Active Directory first. If the User wasn’t found (the User who tries to log in is not a LDAP User), the system tries to log one in as a regular Sitecore User.

Use Mixed Mode Validation if:

Single-Sign-On is required

In general, as long as Mixed mode combines the features of Live Validation and Replication modes, it will be suitable for most security setups.

Instructions specific to Mixed Validation Mode:

Change the domain assembly in /web.config as described under Installation.
If you change the mode from "Live" to "Mixed", you must delete all ldap temporary users from the sitecore/users/temporary folder in Sitecore and Extranet databases.
NOTE: In Mixed Validation Mode, both the Sitecore and the LDAP passwords are valid.

Prev Next