Site Search - Liferay Learn

Excluding User Groups Not Part of the BaseDN In LDAP Import

This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. In older versions of Liferay Portal...

Configuring Theme-Embedded Portlets After Deploying Security-Hotfix-11-6012

legacy How To

This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable....

WeDeploy Auth Admin Portlet in Liferay DXP 7.0 Fix Packs

legacy Troubleshooting

When deploying Liferay DXP 7.0 Fix Pack 24, 25, 26 or 27, the WeDeploy Auth Admin portlet will appear in the Control Panel. WeDeploy is currently a beta product. The addition of this portlet will have no impact or...

SAML Comprehensive Quick Start Guide for Liferay Portal

legacy How To

This is a comprehensive article that documents the steps for how to set up SAML on Liferay Portal 6.2 EE. In addition, this article covers the different ways that SAML can be implemented and utilized. SAML (Security...

Applying Security Update 2012-05-25 requires Tunnel-web

legacy Troubleshooting

This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. When...

Configuring Liferay DXP as SP and OKTA as IdP

legacy How To

This article documents the basic steps users need to execute in order to set up their instance of Liferay DXP as SP, and OKTA as IdP. Resolution OKTA Configuration Log in to OKTA and navigate to Admin > Add Application...

LDAP Import Rejects Users From Certain Domains

legacy Troubleshooting

This article explains why users from specific domains are not imported through LDAP due to the email address validator in the Liferay platform, and provides a solution to resolve this if a specific domain is required...

Using Liferay Connector to OAuth EE

legacy How To

What is OAuth? It is a utility that authorizes third party applications to interact with the Liferay platform. The example from our official documentation is worth repeating here; users can make Twitter or Facebook...

Using the Data Migration Tool in Liferay Portal

legacy How To

This article describes the two uses of the data migration tool in the system administration section of Liferay Portal. The Data Migration Tool is fully supported for Liferay Portal 6.2...

Generating Liferay SAML Environment's metadata.xml

legacy How To

This article describes how to generate Liferay SAML metadata from a web browser. SAML metadata in an XML file is configuration data required to automatically negotiate agreements between system entities, comprising...

Public Hostnames and IP Addresses

legacy How To

Very often a Liferay Portal or Liferay DXP instance resides inside a private network and—due to a company's security policy—while it can serve content to the public Internet, it cannot access the...

Setting Up DXP 7.0 as SP and WSO2 as IdP

legacy How To

This article documents how to set up Liferay DXP 7.0 as SP and WSO2 as IdP. Resolution WSO2 configuration 1. Download wso2is-5.3.0.zip from the WSO2 site and extract the file to a dedicated directory. 2. Go to...

Setting Up ClamAV With the Liferay Platform on Windows

legacy How To

This article documents how to set up Clam Antivirus with the Liferay platform on Windows for testing purposes. The goal is to scan documents for viruses when they are being uploaded. Resolution Download ClamWin for...

Exporting OpenSSO Configuration Settings for Use in Another DXP Environment

legacy How To

If you are migrating your OpenSSO configuration from one environment to another, you don't need to migrate the settings manually. Resolution Login to your Liferay DXP environment. Navigate to Control Panel > Configuration...

Deploying and Managing SAML on Liferay DXP

legacy Troubleshooting

This troubleshooting guide is meant to supplement the existing SAML documentation. The information in this guide explains in more detail to demonstrate the most common use cases. ...

ユーザーグループにユーザーをアサイン後、そのユーザーのSSOログイン直前にアサインを外される

legacy Troubleshooting

, knowledgeArticleType: troubleshooting, legacy: true, name: ユーザーグループにユーザーをアサイン後、そのユーザーのSSOログイン直前にアサインを外される, showDisclaimerMessage: true, sourceTeam: Support, ticketNumber: 128674, title:...

セッションタイムアウトの時間を、インスタンスごとに設定したいです。

legacy

, knowledgeArticleType: reference, legacy: true, name: セッションタイムアウトの時間を、インスタンスごとに設定したいです。, showDisclaimerMessage: true, sourceTeam: Support, ticketNumber: 109505, title: セッションタイムアウトの時間を、インスタンスごとに設定したいです。

Aruba Networks製品の利用有無について

legacy

, knowledgeArticleType: reference, legacy: true, name: Aruba Networks製品の利用有無について, showDisclaimerMessage: true, sourceTeam: Support, ticketNumber: 109889, title: Aruba Networks製品の利用有無について

「アイデンティティ・プロバイダーへリダイレクトしています...」というメッセージの画面の背景を変更可能ですか。

legacy

, knowledgeArticleType: reference, legacy: true, name: 「アイデンティティ・プロバイダーへリダイレクトしています...」というメッセージの画面の背景を変更可能ですか。, showDisclaimerMessage: true, sourceTeam: Support, ticketNumber: 102179, title:...

ワンタイムパスワードが使用できなくなりました。

legacy

, knowledgeArticleType: reference, legacy: true, name: ワンタイムパスワードが使用できなくなりました。, showDisclaimerMessage: true, sourceTeam: Support, ticketNumber: 96077, title: ワンタイムパスワードが使用できなくなりました。

LDAP連携の、認証検索絞り込みに利用可能なトークンの種類

legacy

, knowledgeArticleType: reference, legacy: true, name: LDAP連携の、認証検索絞り込みに利用可能なトークンの種類, showDisclaimerMessage: true, sourceTeam: Support, ticketNumber: , title:...

Error signing via SAML: com.liferay.saml.runtime.exception.AudienceException: Unable verify audience

legacy Troubleshooting

Issue Liferay is configured as a SAML Service Provider. When trying to sign in to Liferay it is not possible and the following error is shown in the logs: 2022-01-20 11:50:38.554 ERROR [default...

Session logs out intermittently after being redirected by the payment link

legacy Troubleshooting

Issue After being redirected by the payment link, the session logs out. Steps to reproduce : 1. Login in Liferay. 2. Call the API in Postman. Request parameters are attached (SSL Commerz Request Parameters.txt)...

SAML Authentication Issue: Message context was not authenticated when Azure AD as IDP

legacy Troubleshooting

Issue After enabling the SAML, when the user is trying to log in, authentication failed with the following message. ERROR [http-nio-8080-exec-36][BaseSamlStrutsAction:59]...

Can Multi-Factor Authentication (MFA) be set for specific roles only?

legacy

Issue We want to set up MFA for Administrators only. Is this possible with Liferay out-of-the-box? Can we target specific users to sign in using multi-factor authentication? Environment DXP 7.4 DXP 7.3 DXP 7.2 ...

How to enable CSRF Token in Liferay?

legacy

Issue How to enable CSRF Token in order to prevent CSRF attacks in Liferay? Environment Liferay DXP 7.2 Resolution Liferay's p_auth token protects against CSRF and is enabled by default. Here is the main...

URL length modification / restriction

legacy

Issue Sometimes we need to modify or restrict the length or URL Liferay generates ( for example for security custom solutions ) but Liferay has no out of the box solution for that. Environment DXP 7.2...

Change the GUEST_LANGUAGE_ID cookie to expire Null

legacy Troubleshooting

Issue The Guest language ID cookie in Liferay has a one-year expiration, whereas the undefined cookie in the F5 balancer caused the conflict. Is there a way to modify the Cookie's duration in Liferay? Environment...

dtSa cookies containing special characters

legacy

Issue As dtsa cookies are detected, are these cookies URLs cause for concern? Is there any information concerning these cookies in relation to Liferay? Use Case: As Liferay generated dtSa cookies contain the...

How to configure the default timeout value to any value instead of having it capped at 500ms

legacy

Issue The default library timeout until Liferay DXP 7.2 fix pack dxp-3 is 250ms. The default library timeout since Liferay DXP 7.2 fix pack dxp-4 is 500ms. Use Case: The user would like to be able to set/configure...

Liferay as SAML SP fails after switching the URL of the virtual instance

legacy Troubleshooting

Issue SAML configuration hasn't been working since the virtual host of the portal instance changed. Caused by: org.opensaml.ws.security.SecurityPolicyException: Request was required to be secured but was not...

Resource and Global scopes tabs are not listing under oAuth2 administration scopes

legacy How To

Issue I not see the Resource and Global Sub-tabs under the Scopes tab on Oauth2 clients (in Control Panel/ OAuth2 Administration) Environment 7.3+ Resolution After https://issues.liferay.com/browse/LPS-105158 the scope...

EU Login via OpenID Connect needs Proof Key for Code Exchange (PKCE)

legacy

Issue I would like to integrate my portal with an EU Login mock server instance via OpenID Connect It does not work since the OpenID connect server needs Proof Key for Code Exchange (PKCE) After configuration, when I am...

Records are not removed from samlspsession table if the user closes the browser instead of logging out

legacy Troubleshooting

Issue Records are not removed from `samlspsession` table if the user closes the browser instead of logging out. Steps to reproduce: 1. Setup two instances of Liferay to use SAML - one as IDP and one as SP....

SAML IDP is unable to initiate SLO

legacy Troubleshooting

Issue SAML Identity Provider is unable to initiate Single Log Out Notes 1. Set the different virtual hosts as below as an example 127.0.0.1www.bbb.com (For IDP) 127.0.0.1www.sp.com (For SP) 2. Using thetest...

Can both Liferay and LDAP Password policies be enabled at the same time?

legacy

Issue Is there a way to make both of Liferay and LDAP policies work together, so that users logging via Liferay authentication will be handled by Liferay's password policies and users authenticating...

Local Liferay Admin Users unable to authenticate when LDAP is Configured on Virtual Instance

legacy How To

Issue When a main Liferay instance and a second virtual instance are both connected to the same LDAP server, local Liferay admin users are unable to log in when the “Required” box is checked. In the case where the LDAP...

Cannot set proper permissions for Panel Category Entries in a Custom Site

legacy Troubleshooting

Issue The custom site panel category entries' panel app permissions do not work as intended. We are unable to grant permissions to access the panel app through a "Site role" if the category key does not start...

Security configuration related to session management

legacy

Issue There are some security configuration requirement regarding session management. Environment Liferay DXP 7.4 Resolution Application uses the 'referrer' header as a supplemental check only, and not just for any...

Browser Pop-Up For Non-Https Site

legacy Troubleshooting

Issue We are seeing a browser pop-up warning for our users when they try to login to our http site. They become concerned as it says the connection is not secure, but to 'send anyway'. Can this be disabled by Liferay...

OpenID Connect Error - "Signed JWT rejected"

legacy Troubleshooting

Issue When configuring authentication using OpenID Connect, login fails and the following error is reported: Unable to validate tokens: Signed JWT rejected: Another algorithm expected, or no matching key(s) found...

Is Liferay's SAML Service Provider Logout URL required in the Identity Provider?

legacy Troubleshooting

Issue Azure's SAML Identity Provider (IdP) marks the Service Provider's (SP) Logout URL as "optional" However, when I remove Liferay's Logout URL from Azure's SAML configurations, Liferay users are not signed out...

Vulnerability：About CVE-2022-45143

legacy

Please be aware that the page you are viewing has been machine translated from Japanese into English and may contain some translation errors. If you observe any issues with the translation, please contact us. Issue...

How to prevent an AD user from logging into Liferay using the old password if LDAP authentication cannot set to be required

legacy Troubleshooting

Issue After the user changes the password in Microsoft Active Directory (AD), the user can still log into Liferay using the old password. If enabling "Required" option, the issue can be resolved. But users created manually...

LDAPからのユーザーインポートについて

legacy How To

, knowledgeArticleType: howTo, legacy: true, name: LDAPからのユーザーインポートについて, showDisclaimerMessage: true, sourceTeam: Support, ticketNumber: , title: LDAPからのユーザーインポートについて

DXPで「ldap.import.create.role.per.group」を使用する方法

legacy How To

, knowledgeArticleType: howTo, legacy: true, name: DXPで「ldap.import.create.role.per.group」を使用する方法, showDisclaimerMessage: true, sourceTeam: Support, ticketNumber: , title:...

LiferayでのSAML設定方法

legacy How To

, knowledgeArticleType: howTo, legacy: true, name: LiferayでのSAML設定方法, showDisclaimerMessage: true, sourceTeam: Support, ticketNumber: , title: LiferayでのSAML設定方法

SCIM Support for Microsoft Entra ID

legacy

Issue Is there complete out-of-the-box SCIM support for Microsoft Entra ID in Liferay DXP? Environment Versions before 2025.Q2.0. Resolution Full support for Microsoft Entra ID with Liferay's SCIM functionality was...

User ID's and Emails populating due to SSTI vulnerability

legacy Troubleshooting

Issue We've found an undesirable behvavior when using new widget templates on a page. When using the expandoColumnLocalService.CTPersistence.openNewSession(null) function, the the direct SQL query execution within...

Is it Possible to Require an Administrator to Enter Their Password When Changing a User's Password?

legacy

Issue When I want to updates a user's password as an administrator, the system does not require to re-enter my own password for authentication. This is inconsistent with other actions, such as updating a screen...

Web Content Templates cache Absolute image URLs, not Relative URLs

legacy Troubleshooting

Issue The templates cache absolute image URLs instead of relative URLs. Environment 2024.Q1.12, 2024.Q1.18 Resolution Upgrade to 2024.Q2.0+ or Request a hotfix with LPD-23196, knowledgeArticleType: troubleshooting,...

Does Liferay have an Attestation of Compliance to be PCI certified?

legacy

Issue We are in the process of reviewing application compliance and want to know if Liferay has an attestation of compliance (related to PCI), specifically the Payment Card Industry Data Security Standard? Environment...

Password Reset Link Immediately Shows as 'No Longer Valid'

legacy Troubleshooting

Issue When a user requests a password reset, the link in the notification email leads to an error page stating, "Your password reset link is no longer valid." This occurs even if the link is clicked immediately...

StaleStateException Error During Startup with OpenID Connect Configuration

legacy Troubleshooting

Issue During a Liferay DXP startup, the following error message appears in the logs, related to OpenID Connect provider configuration: ERROR [...][BatchingBatch:139] HHH000315: Exception executing batch...

Workflow Task URL for Unauthorized User Returns 404 Instead of Login Page

legacy Troubleshooting

Issue When an unauthorized user attempts to access a workflow task URL, they are shown a 404 error page instead of being redirected to the login page. This issue specifically occurs when the URL follows the...

OAuth2 Token sometimes gets 401 response

legacy Troubleshooting

Issue Sometimes users are unable to log in because their OAuth2 tokens receive a 401 "Unauthorized" response. This seems to happen randomly, and the tokens should be valid. Environment Liferay DXP Resolution...

Despite the fix "Relay state exceeds 80 bytes" error and redirections to IDP

legacy Troubleshooting

Issue Despite the fix "Relay state exceeds 80 bytes" error and redirections to IDP We found this article and had a hotfix with LPS-76246 We found that the fix is not applied correctly. Environment Liferay DXP 7.3...

Time-Based Authenticator QR Code Not Populating

legacy Troubleshooting

Issue When trying to set up the QR Code for MFA settings, following this documentation Multi-Factor Authentication Checkers, we've found that the QR code doesn't populate. It should be populating under "Shared...

Node.js Version for Client Extension Development and Handling Security Vulnerabilities

legacy

Issue When developing client extensions with React for Liferay DXP 2024.Q4 or newer, what is the recommended Node.js version? The official compatibility matrix suggests Node.js version 20.12.2, but this version...

Logging to application always taking to home page instead of request url

legacy Troubleshooting

Issue We are encountering an issue where users are consistently redirected to the application's homepage immediately following SAML authentication, even when an alternative page was initially requested. Environment...

Search Results