Search Results

Issue When navigating our site, a ;jsessionid parameter is intermittently appended to the page URL. When this happens, portlets on the page fail to render, displaying a Portlet is temporarily unavailable error. This issue occurs when the session handling mechanism falls back to URL-based...

Issue When uploading a file in Documents and Media, a form refresh (e.g., by changing the Document Type or triggering a metadata validation error) causes the selected file to be cleared from the input field. Despite the file no longer being attached, the form can be submitted. This...

Issue When extending a system object, such as the User object, with a custom object field (e.g., customID), attempting to filter user accounts by this custom field using the headless API results in an error. The API call looks like this:...

Issue After following the documentation to set up Cross-Region Disaster Recovery in Liferay PaaS, the backups from the primary (production) environment are not visible in the secondary (disaster recovery) environment. The UI in the DR environment's Backup service does not show the tab or...

Issue When a web content article containing an embedded audio or video file is created and then re-opened for editing, or when switching between WYSIWYG and source view, extra empty paragraph tags are inserted adjacent to the audio and video players. Environment Liferay DXP 2025.Q1+...

Issue Liferay Commerce upgraded its internal reporting engine to JasperReports 7, utilizing a new XML schema with a Jackson-based parser that renders older Jasper 6 JRXML files incompatible. How can I upgrade custom Commerce order templates to the JasperReports 7 standard to make my...

Authenticating with Kerberos You can use Kerberos to authenticate Microsoft Windows™ accounts with Liferay DXP. This is done by using a combination of Liferay DXP's LDAP support and a web server...

Configuring SAML at the Instance Level Each portal instance can be a SAML provider, either an Identity Provider (IdP) or a Service Provider (SP). Whichever role your DXP instance fills, you can...

Configuring SAML at the System Level Before allowing any portal instances to enable SAML authentication, you should configure it at the system level so those instances have a foundation from which...

Authenticating with CAS (Central Authentication Service) CAS was deprecated as of Liferay DXP 7.2 and removed as of Liferay DXP 7.4. Please use SAML instead. CAS is a widely used open source...

Authenticating with SAML The SAML (Security Assertion Markup Language) adapter provides Single Sign On (SSO) and Single Log Off (SLO) in your deployment. SAML works by using Identity Providers...

Securing Sign-In The Sign-In widget calls the various mechanisms (the portal database, an LDAP server, a SAML identity provider, or any of the ways users can authenticate) that authenticate users....

Using OpenID Connect OpenID Connect is a lightweight authentication layer that enables users to authenticate using accounts they have on other systems. It's built on top of the OAuth 2.0...

SAML Authentication Process Overview Both the IdP and the SP can initiate the Single Sign On process, and the SSO flow is different depending on each one. Regardless of how it's initiated, SSO is...

Configuring Liferay Authentication With Auth0 Using OpenId Connect This tutorial guides you through integrating Auth0, your Identity Provider (IdP), with your Liferay environment using OpenID...

Using OpenAM Deprecated in Liferay DXP 2024.Q4/Portal GA129 OpenAM 13 is deprecated as of Liferay DXP 2024.Q4/Portal GA129. OpenAM 12 and below were deprecated as of Liferay DXP 7.2. Versions of...

Configuring Liferay Authentication With PingOne Using SAML This tutorial guides you through the basic steps needed to integrate PingOne, your Identity Provider (IdP), with your Liferay environment...

Token-based Single Sign On Authentication Token-based SSO authentication was introduced in Liferay Portal 7.0 to standardize support for Shibboleth, SiteMinder, Oracle OAM, and any SSO product that...

Iframe Sanitizer Liferay DXP 2025.Q4+ Liferay DXP includes an iframe sanitizer that controls how iframes are handled across each instance. Iframes can introduce security risks if they load...

Fast IDentity Online 2 Available: Liferay DXP/Portal 7.4+ The Fast IDentity Online 2 or FIDO2 standard allows for the use of biometrics (i.e., fingerprint readers), mobile devices, or other...