Capability

Security

Search Bar

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Category
  • Capability
  • Deployment Approach
  • Feature
  • Resource Type
Category
  • Capability
  • Deployment Approach
  • Feature
  • Resource Type
Managing Guest User Entries
Official Documentation
Managing Guest User Entries When you create an object and its application UI, unauthenticated users cannot add object entries, even if you add an object-backed application to a page and grant the...
Users and Accounts
Official Documentation
Users and Accounts Liferay Commerce provides specialized roles out of the box to satisfy e-commerce needs. These roles are included alongside the standard DXP roles and define basic user profiles...
Adding Addresses to an Account for Commerce 2.1 and Earlier Versions
Official Documentation
Adding Addresses to an Account for Commerce 2.1 and Earlier Versions This article documents how to update an account's billing and shipping addresses using either the Control Panel. Navigate to...
Adding Organizations to Accounts
Official Documentation
Adding Organizations to Accounts Organizations can be added to an Account to simplify the management and administration of accounts. To learn more about using Organizations with Accounts see Using...
Adding Organizations to Accounts for Commerce 2.1 and Earlier Versions
Official Documentation
Adding Organizations to Accounts for Commerce 2.1 and Earlier Versions Organizations can be added to an Account to simplify the management and administration of accounts. To learn more about using...
Account Management
Official Documentation
Account Management Available Liferay 7.3 and Below In Liferay, accounts store customer information, such as billing and shipping addresses, order details, and VAT number. Once created, accounts...
Adding Addresses to an Account
Official Documentation
Adding Addresses to an Account This article documents how to update an account's billing and shipping addresses using either the Account Management widget or the Control Panel. Using the Account...
Commerce Account Roles
Official Documentation
Commerce Account Roles Account roles are sets of permissions that grant users specific abilities within an account context. These roles can be used to delegate account responsibilities, or paired...
Creating a New Account for Commerce 2.1 and Earlier Versions
Official Documentation
Creating a New Account for Commerce 2.1 and Earlier Versions Create an account through the Control Panel. Access to the Control Panel is typically restricted to those with administrative...
Creating a New Account
Official Documentation
Creating a New Account There are two ways to create an account: 1) using the Account Management widget and 2) through the Control Panel. Access to the Control Panel is typically restricted to those...
Creating a New Account Group
Official Documentation
Creating a New Account Group Account Groups allow accounts to be grouped based on business criteria, such as grouping accounts by geographic region (US West Coast, the Midwest, and the South)....
Creating a New Account Group for Commerce 2.1 and Earlier Versions
Official Documentation
Creating a New Account Group for Commerce 2.1 and Earlier Versions Account Groups allow accounts to be grouped based on business criteria, such as grouping accounts by geographic region (US West...
Inviting Users to an Account
Official Documentation
Inviting Users to an Account This article documents how to invite users to an account. Corporate accounts can have more than one user assigned to handle various aspects of a transaction. There are...
Using Organizations to Create a Sales Network
Official Documentation
Using Organizations to Create a Sales Network The organizational structure of B2B sales networks can be mirrored in Liferay Commerce using the Organizations feature. Organizations are hierarchical...
Commerce Roles Reference
Official Documentation
Commerce Roles Reference Liferay includes four roles out-of-the-box for Commerce: account administrator, account member, buyer, and order manager. You can modify these roles or create additional...
Pricing Permissions
Official Documentation
Pricing Permissions With Liferay Commerce, you can use permissions to control access to Pricing applications and resources in the Commerce tab of the Global Menu (Global Menu). Control access to...
Product Management Permissions
Official Documentation
Product Management Permissions With Liferay Commerce, you can use permissions to control access to Product Management applications and resources in the Commerce tab of the Global Menu (Global...
Inviting Users to an Account for Commerce 2.1 and Earlier Versions
Official Documentation
Inviting Users to an Account for Commerce 2.1 and Earlier Versions This article documents how to invite users to an account. Corporate accounts can have more than one user assigned to handle...
Order Management Permissions
Official Documentation
Order Management Permissions With Liferay Commerce, you can use permissions to control access to Order Management applications and resources in the Commerce tab of the Global Menu (Global Menu). ...
Inventory Management Permissions
Official Documentation
Inventory Management Permissions With Liferay Commerce, you can use permissions to control access to Inventory Management applications and resources in the Commerce tab of the Global Menu (Global...
Commerce Roles and Permissions
Official Documentation
Commerce Roles and Permissions The permissions assigned to a user role determine the Liferay applications and resources they can access and use. You can scope each role to an instance, site,...
Settings Permissions
Official Documentation
Settings Permissions With Liferay Commerce, you can use permissions to control access to Settings applications in the Commerce tab of the Global Menu (Global Menu). Control access to Settings...
Store Management Permissions
Official Documentation
Store Management Permissions With Liferay Commerce, you can use permissions to control access to Store Management applications and resources in the Commerce tab of the Global Menu (Global Menu). ...
Audit Configuration Reference
Official Documentation
Audit Configuration Reference Configuration settings for audits are available at a system scope. You can find these settings by opening the Global Menu (Global Menu) and navigating to Control Panel...
Audit Framework
Official Documentation
Audit Framework Liferay's audit framework shows activities relating to users, user groups, organizations, roles, multi-factor authentication, and objects (definitions, fields, actions, layouts,...
Configuring Liferay
Official Documentation
Configuring Liferay Liferay is a very adaptable tool. You can modify and configure it to suit the needs of your application.
Searching and Exporting Audit Events
Official Documentation
Searching and Exporting Audit Events The audit application comes with simple and advanced searching capabilities. To use the simple search, you can enter a search term and click the magnifying...
Security Settings
Official Documentation
Security Settings Enabling Antivirus Scanning for Uploaded Files More coming soon!
User Authentication
Official Documentation
User Authentication The User Authentication settings define how Users can authenticate, the various authentication methods that are required for them, and the screen names and email addresses that...
Configuring Content Security Policy Headers
Official Documentation
Configuring Content Security Policy Headers Modern browsers use Content Security Policy HTTP response headers to enhance web pages' security to mitigate certain types of attacks (like Cross-Site...
Securing Web Services
Official Documentation
Securing Web Services Liferay DXP provides four security layers for web services: IP permission layer: The IP address from which a web service invocation request originates must be white-listed in...
Setting Service Access Policies
Official Documentation
Setting Service Access Policies Service Access Policies define what services or service methods can be invoked remotely. You can apply many of them at once to produce a combined effect. They are...
Setting Up CORS
Official Documentation
Setting Up CORS CORS stands for Cross-Origin Resource Sharing. An Origin is a web server at a different domain, and a Resource is some asset stored on the server, like an image, PDF, or HTML file....
Using Authentication Verifiers
Official Documentation
Using Authentication Verifiers Authentication Verifiers authenticate remote invocations of Liferay Portal's API in a centralized and extensible way. They have two main responsibilities: Verify...
System for Cross-domain Identity Management (SCIM)
Official Documentation
System for Cross-domain Identity Management (SCIM) Liferay DXP 2024.Q1+ System for Cross-domain Identity Management or SCIM, is an open standard that automates user provisioning. In other words,...
Accounts
Official Documentation
Accounts Available 7.4+ Accounts provide administrators with a way to organize and manage users for various commerce or business needs. Unlike organizations or user groups, accounts help...
Account Addresses
Official Documentation
Account Addresses Available 7.4+ Account addresses are the billing or shipping addresses associated with Business or Person accounts. Adding an Account Address Open the Global Menu (Global...
Users and Permissions
Official Documentation
Users and Permissions Liferay comes with a comprehensive framework to manage user access and roles within Liferay. To support complex organizational needs, there are several entities within the...
Account Groups
Official Documentation
Account Groups Available 7.4+ Use Account Groups to organize related accounts. For example, group accounts by region (Americas, Asia Pacific, Europe, etc.). Creating an Account Group Open the...
Account Management Widget
Official Documentation
Account Management Widget Available 7.4+ Use Account Management widget to manage and access account information from any page. This provides access for those without permission to view the Control...