Authentication and Single Sign-On

By default Sitefinity is using claims-based identity. In a claims-based scenario the identity of the user is authenticated by Security Token Service (STS). The STS issues tokens that contain the claims, which the user makes about his or her identity. Claims can contain the user identity as well as roles and permissions.

Section contents

• Authentication models overview
  Read this section to get familiar with the concepts of forms and claims-based authentications and simple web tokens
• Setting up SSO with Windows Authentication
  Use this procedure to set up an external STS which uses Windows Authentication. Then you connect the STS to one or more Sitefinity sites.
• Setting up SSO with forms authentication
  Use this procedure to set up single sign-on, which uses forms authentication.
• Switching to claims-based authentication
  If you are upgrading your project from an older Sitefinity version, claims-based authentication will not be applied automatically. Use this procedure to configure Sitefinity to work with claimes-based authentication.
• Switching to forms authentication
  Use this procedure, if you have claims-based authentication and want to switch back to forms authentication.
• Setting up SSO with claims-based authentication
  Use this procedure to set up single sign-on, which uses forms authentication.