Capability

Security

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Category
Category
Commerce Account Roles
Commerce Account Roles Account roles are sets of permissions that grant users specific abilities within an account context. These roles can be used to delegate account responsibilities, or paired...
Creating a New Account Group
Creating a New Account Group Account Groups allow accounts to be grouped based on business criteria, such as grouping accounts by geographic region (US West Coast, the Midwest, and the South)....
Commerce Roles and Permissions
Commerce Roles and Permissions The permissions assigned to a user role determine the Liferay applications and resources they can access and use. You can scope each role to an instance, site,...
Account Management
Account Management Available Liferay 7.3 and Below In Liferay, accounts store customer information, such as billing and shipping addresses, order details, and VAT number. Once created, accounts...
Adding Organizations to Accounts for Commerce 2.1 and Earlier Versions
Adding Organizations to Accounts for Commerce 2.1 and Earlier Versions Organizations can be added to an Account to simplify the management and administration of accounts. To learn more about using...
Inviting Users to an Account for Commerce 2.1 and Earlier Versions
Inviting Users to an Account for Commerce 2.1 and Earlier Versions This article documents how to invite users to an account. Corporate accounts can have more than one user assigned to handle...
Creating a New Account for Commerce 2.1 and Earlier Versions
Creating a New Account for Commerce 2.1 and Earlier Versions Create an account through the Control Panel. Access to the Control Panel is typically restricted to those with administrative...
Commerce Roles Reference
Commerce Roles Reference Liferay includes four roles out-of-the-box for Commerce: account administrator, account member, buyer, and order manager. You can modify these roles or create additional...
LDAP Configuration Reference
LDAP Configuration Reference To access LDAP configuration settings, open the Global Menu (Applications Menu icon) and navigate to Control Panel → Configuration → Instance Settings → Security →...
User Group Sites
User Group Sites With user group sites, you can create pages that are added automatically to each member’s personal site. These pages are organized into two page sets, My Profile (public) and My...
Updating User Profile Pictures
Updating User Profile Pictures Users have profile pictures. Administrative Users can upload images in the Edit User form, and Users can update their own account information, including profile...
Account Roles
Account Roles Available 7.4+ Create different account roles with specific permissions and assign them to account users to manage access to accounts. There are two types of account roles: ...
Audit Configuration Reference
Audit Configuration Reference Configuration settings for audits are available at a system scope. You can find these settings by opening the Global Menu (Global Menu) and navigating to Control Panel...
Configuring Content Security Policy Headers
Configuring Content Security Policy Headers Modern browsers use Content Security Policy HTTP response headers to enhance web pages' security to mitigate certain types of attacks (like Cross-Site...
User Authentication
User Authentication The User Authentication settings define how Users can authenticate, the various authentication methods that are required for them, and the screen names and email addresses that...
Adding Subtypes to Account Addresses
Adding Subtypes to Account Addresses Liferay DXP 2025.Q2+ In addition to billing and shipping address types, administrators can define and assign custom subtypes for account addresses. This...
Managing Privacy Settings
Managing Privacy Settings You can ensure GDPR compliance for your cookies and collect administrator usage data (such as Control Panel and Product Menu interactions) using Liferay's configuration...
Connecting to an LDAP Directory
Connecting to an LDAP Directory Lightweight Directory Access Protocol (LDAP) servers are common user stores for Liferay DXP. You can configure LDAP at the system scope in System Settings or at the...
Adding and Managing Users
Adding and Managing Users Core user management activities include adding, editing, and deleting users. These activities are typically restricted to Administrative users. Adding Users Open the...
Account Users
Account Users For Liferay 7.4 U55+/GA55+ Once you've created an account, you can associate existing users with it manually. Alternatively, you can create and associate users with an account...