Platform - Liferay Learn

JSON Web Token Assertions

JSON Web Token Assertions An assertion helps in sharing identity and security information across different domains. There are two uses for assertions: Authorization grants Client authentication...

Published Date: Feb 25, 2025 12:39 PM

Using Private Key JWT (JSON Web Token)

Using Private Key JWT (JSON Web Token) Liferay supports private key JWT as an authentication method for OAuth 2 clients. In this flow, the client itself creates the assertion. Liferay authenticates...

Published Date: Mar 6, 2025 4:05 PM

Using OAuth2 to Authorize Users

Using OAuth2 to Authorize Users You can create applications that access Liferay's headless REST APIs using the OAuth 2.0 authorization protocol. The provided sample React app demonstrates three...

Published Date: Nov 22, 2024 10:48 PM

DXP

DXP Welcome to the official documentation for the latest versions of Liferay DXP and Liferay Portal! Liferay DXP is the commercially supported and enterprise ready platform used around the world,...

Published Date: Nov 22, 2024 10:49 PM

Securing Liferay

Securing Liferay Liferay is built with security in mind. This includes mitigation of common security vulnerabilities and exploits like those described by the OWASP Top 10 and the CWE/SANS Top 25. ...

Published Date: Jan 18, 2025 2:47 AM

Configuring Sign-In

Configuring Sign-In By default, Liferay DXP uses the Sign In widget to authenticate users. The Sign In widget appears on the default home page at http[s]://[server-name:port]/web/guest/home. If...

Published Date: May 9, 2024 6:52 PM

Authenticating with CAS (Central Authentication Service)

Authenticating with CAS (Central Authentication Service) CAS was deprecated as of Liferay DXP 7.2 and removed as of Liferay DXP 7.4. Please use [SAML](./authenticating-with-saml.md) instead. CAS...

Published Date: May 9, 2024 6:52 PM

Configuring Single Sign-On

Configuring Single Sign-On Liferay Portal/DXP supports many ways of authenticating, from token-based solutions to standards such as OpenID Connect and SAML. With all the available options, you...

Published Date: May 9, 2024 6:52 PM

Authenticating with SAML

Authenticating with SAML The SAML (Security Assertion Markup Language) adapter provides Single Sign On (SSO) and Single Log Off (SLO) in your deployment. SAML works by using Identity Providers...

Published Date: May 9, 2024 6:52 PM

Configuring SAML at the Instance Level

Configuring SAML at the Instance Level Each portal instance can be a SAML provider, either an Identity Provider (IdP) or a Service Provider (SP). Whichever role your DXP instance fills, you can...

Published Date: May 9, 2024 6:52 PM

Importing User Groups' Memberships from an External IdP through SAML

Importing User Groups' Memberships from an External IdP through SAML This feature was released behind a dev feature flag. It was made Generally Available (GA) in Liferay DXP 2024.Q2/Portal GA120....

Published Date: May 9, 2024 6:52 PM

SAML Admin

SAML Admin The SAML Admin panel is the best place to configure your SAML instance. Use it instead of Instance Settings to streamline your SAML administration experience. Starting from Liferay...

Published Date: May 9, 2024 6:52 PM

Captcha API Basics

Captcha API Basics Liferay provides a headless API to retrieve and submit captchas using the SimpleCAPTCHA engine. Using the /captcha endpoint from the API Explorer, you can add captchas in your...

Published Date: May 9, 2024 6:52 PM

SCIM Group API Basics

SCIM Group API Basics Liferay DXP 2024.Q1+/Portal GA112+ Liferay provides a headless API to perform CRUD operations on SCIM groups to keep their information in sync with your company's...

Published Date: May 9, 2024 6:52 PM

SCIM User API Basics

SCIM User API Basics Liferay DXP 2024.Q1+/Portal GA112+ Liferay provides a headless API to perform CRUD operations on SCIM users to keep their identity information in sync with your company's...

Published Date: May 9, 2024 6:52 PM

Token-based Single Sign On Authentication

Token-based Single Sign On Authentication Token-based SSO authentication was introduced in Liferay Portal 7.0 to standardize support for Shibboleth, SiteMinder, Oracle OAM, and any SSO product that...

Published Date: May 9, 2024 6:52 PM

Using OpenAM

Using OpenAM Deprecated in Liferay DXP 2024.Q4/Portal GA129 OpenAM 13 is deprecated as of Liferay DXP 2024.Q4/Portal GA129. OpenAM 12 and below were deprecated as of Liferay DXP 7.2. Versions of...

Published Date: May 9, 2024 6:52 PM

Using OpenID Connect

Using OpenID Connect OpenID Connect is a lightweight authentication layer that enables users to authenticate using accounts they have on other systems. It's built on top of the OAuth 2.0...

Published Date: May 9, 2024 6:52 PM

Authenticating with Kerberos

Authenticating with Kerberos You can use Kerberos to authenticate Microsoft Windows™ accounts with Liferay DXP. This is done by using a combination of Liferay DXP's LDAP support and a web server...

Published Date: May 9, 2024 6:52 PM

Configuring SAML at the System Level

Configuring SAML at the System Level Before allowing any portal instances to enable SAML authentication, you should configure it at the system level so those instances have a foundation from which...

Published Date: May 9, 2024 6:52 PM