Capability

Security

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Category
Category
Adding Organizations to Accounts for Commerce 2.1 and Earlier Versions
Adding Organizations to Accounts for Commerce 2.1 and Earlier Versions Organizations can be added to an Account to simplify the management and administration of accounts. To learn more about using...
Creating a New Account Group for Commerce 2.1 and Earlier Versions
Creating a New Account Group for Commerce 2.1 and Earlier Versions Account Groups allow accounts to be grouped based on business criteria, such as grouping accounts by geographic region (US West...
Commerce Roles and Permissions
Commerce Roles and Permissions The permissions assigned to a user role determine the Liferay applications and resources they can access and use. You can scope each role to an instance, site,...
Commerce Account Roles
Commerce Account Roles Account roles are sets of permissions that grant users specific abilities within an account context. These roles can be used to delegate account responsibilities, or paired...
Adding Organizations to Accounts
Adding Organizations to Accounts Organizations can be added to an Account to simplify the management and administration of accounts. To learn more about using Organizations with Accounts see Using...
Inviting Users to an Account for Commerce 2.1 and Earlier Versions
Inviting Users to an Account for Commerce 2.1 and Earlier Versions This article documents how to invite users to an account. Corporate accounts can have more than one user assigned to handle...
Creating a New Account Group
Creating a New Account Group Account Groups allow accounts to be grouped based on business criteria, such as grouping accounts by geographic region (US West Coast, the Midwest, and the South)....
Inviting Users to an Account
Inviting Users to an Account This article documents how to invite users to an account. Corporate accounts can have more than one user assigned to handle various aspects of a transaction. There are...
Audit Framework
Audit Framework Liferay's audit framework shows activities relating to users, user groups, organizations, roles, multi-factor authentication, and objects (definitions, fields, actions, layouts,...
Setting Service Access Policies
Setting Service Access Policies Service Access Policies define what services or service methods can be invoked remotely. You can apply many of them at once to produce a combined effect. They are...
Channel Defaults Permissions Reference
Channel Defaults Permissions Reference Liferay DXP 7.4 U75+/GA75+ Setting channel defaults for an account ensures that addresses, shipping options, terms and conditions, and payment methods are...
Configuring User Import and Export
Configuring User Import and Export The import/export settings configure mappings between LDAP and Liferay to match users between the two systems. Finding Users in Your LDAP Directory...
Securing Web Services
Securing Web Services Liferay DXP provides four security layers for web services: IP permission layer: The IP address from which a web service invocation request originates must be white-listed in...
Setting Up CORS
Setting Up CORS CORS stands for Cross-Origin Resource Sharing. An Origin is a web server at a different domain, and a Resource is some asset stored on the server, like an image, PDF, or HTML file....
Account Addresses
Account Addresses Available 7.4+ Account addresses are the billing or shipping addresses associated with Business or Person accounts. Adding an Account Address Open the Global Menu (Global...
Account Management Widget
Account Management Widget Available 7.4+ Use Account Management widget to manage and access account information from any page. This provides access for those without permission to view the Control...
Using Workflow with Accounts
Using Workflow with Accounts Liferay 7.4 U49+/GA49+ Accounts are fully integrated with Liferay's workflow engine, so you can enable an approval process for account creation. To enable a workflow...
Using Authentication Verifiers
Using Authentication Verifiers Authentication Verifiers authenticate remote invocations of Liferay Portal's API in a centralized and extensible way. They have two main responsibilities: Verify...
System for Cross-domain Identity Management (SCIM)
System for Cross-domain Identity Management (SCIM) Liferay DXP 2024.Q1+ System for Cross-domain Identity Management or SCIM, is an open standard that automates user provisioning. In other words,...
Configuring the Anonymous User
Configuring the Anonymous User Internet users are increasingly and justifiably concerned about how their personal data is processed by the systems they use. Liferay is aware of the need for...