Capability

Security

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Feature
Deployment Approach
Using the 'getOriginalServlet' Function to Retrieve the Default Query String in DXP 7.0
This article serves as a reference guide on how to use the getOriginalServletRequest function to get the default queryString when using the OSGi framework. Developers familiar with Liferay Portal 6.2 EE and now using...
WeDeploy Auth Admin Portlet in Liferay DXP 7.0 Fix Packs
When deploying Liferay DXP 7.0 Fix Pack 24, 25, 26 or 27, the WeDeploy Auth Admin portlet will appear in the Control Panel. WeDeploy is currently a beta product. The addition of this portlet will have no impact or...
Configuring Theme-Embedded Portlets After Deploying Security-Hotfix-11-6012
This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable....
Changes in Wiki Syntax Parsing from 6.0 EE SP1 to 6.0 EE SP2
In Liferay Portal 6.0 EE SP2, a new Creole parser for the Wiki portlet has been implemented and changed how links are parsed. For example, previously in 6.0 EE SP1, links using single...
Liferay DXP 7.1 Known Issues
For customers working on Liferay DXP 7.1, the following table has been formed to serve you and provide current information regarding known issues that have been discovered, reported,...
Liferay DXP 7.0 Known Issues
For customers working on Liferay DXP 7.0, the following table has been formed to serve you and provide current information regarding known issues that have been discovered, reported, or resolved. Please be sure to...
Avoiding Authentication Errors With IE8 and IE9
This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. When a session of Liferay times-out, an...
User Interface Changes in DXP 7.0
This article highlights several changes to front-end tools and features with User Interface for Liferay DXP 7.0. Resolution Here are some highlighted changes followed by brief...
Buttons missing from CKEditor when using Internet Explorer 8
This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. While...
Things You Should Know Before Using Liferay WYSIWYG Portlet
The Liferay WYSIWYG portlet allows for WYSIWYG editing capabilities in a very simplified package. While the lightweight nature of the Liferay WYSIWYG portlet can be useful, Liferay Marketplace indicates that the...
Applying Security Update 2012-05-25 requires Tunnel-web
This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. When...
SAML Comprehensive Quick Start Guide for Liferay Portal
This is a comprehensive article that documents the steps for how to set up SAML on Liferay Portal 6.2 EE. In addition, this article covers the different ways that SAML can be implemented and utilized. SAML (Security...
Unable to add portlets in Nested Portlet
Issue When using the "Nested Portlets" portlet, one possibility is that portlets cannot be nested because the Nested Portlets portlet is collapsed. Resolution Ensure Nested Portlets is not collapsed when attempting to...
Minification May No Longer Work if JS Code Contains eval() or with() on DXP 7.0
This article serves as a reference concerning an intended change in the minification process which might break some JavaScript code. After upgrading from Liferay Portal 6.2 to Liferay DXP 7.0, any JavaScript code...
LiferayPortletURLs Generated For a .War File Do Not Have Authentication Token
This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. Subscribers often develop custom portlets...
Kaleo Workflow Changes for DXP 7.0
This article documents the Kaleo workflow changes that have taken place in Liferay Digital Experience Platform. In DXP, there are some Kaleo Workflow related user experience changes happening surrounding Web Content....
JSONWS Guest Access
The Liferay platform's JSONWS page is available to unauthenticated users at your Liferay_URL/api/jsonws. However, this does not mean that guest users have access to execute JSON web services. Even if the web...
Microsoft Internet Explorer 11 Performance Issues Due to CSS Style Calculations
Liferay Support does not recommend or endorse specific third-party products over others. Liferay is not responsible for any instructions herein or referenced regarding these products. Any implementation of these...
Internet Explorer 11 with Compatibility Mode May Lead to Slow Page Loads
Liferay Support does not recommend or endorse specific third-party products over others. Liferay is not responsible for any instructions herein or referenced regarding these products. Any implementation of...
Map of Liferay DXP 7.0 Modularized Apps
Many apps from Liferay Marketplace are now included in Liferay Digital Experience Platform 7.0 Suites, and are updated through Fix Packs and Service Packs.  Please see the complete list below: Resolution Collaboration...
Getting Started With Developer Studio
With the purchase of a subscription to Liferay Digital Experience Platform (DXP), customers have access to Liferay Developer Studio, which  is a set of Eclipse plugins designed to ease...
Applying Patches to Liferay Portal for Versions 6.0 EE SP1 and earlier
This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. This...
Configuring Log4j Logging for the Audit Portlet in DXP 7.0
This article demonstrates how to create a separate audit.YYYY-MM-DD.log file within ${liferay.home}/log for audit INFO messages. It should roll over every day with this configuration. Resolution Once the DXP 7.0...
Patching Tool 2.0.8
The Patching Tool 2.0.8 is a maintenance release for Liferay Digital Experience Platform 7.0 and 7.1, which includes fixes and minor updates.  Resolution Release Highlights: ...
Minification Issues When Using ES6 in Your Custom Code
This article documents a minification error you will encounter if using ECMAScript 6 (ES6) in your custom code and the ES6 code is not transpiled. In a production environment, we enable the following property in order to...
Liferay Portal Activation Key Deployment Instructions for versions 5.2 SP4 and earlier
An activation key for Liferay version 5.4 SP4 and lower is based off the Server ID or server MAC address and utilizes a license key. The key will be generated by Liferay's Provisioning...
Adding a User to a Site, Role, or User Group Automatically
This article describes how to add sites, roles or user groups to a user automatically. Resolution Go to Control Panel Select Portal Settings Select the Users section Select the tab for...
Staging Best Practices for Liferay Portal
This article documents some recommendations that administrators should be mindful of when they prepare to use Staging on their Sites, or when they are managing their already existing Staging infrastructure. Local...
Customizing the Announcements Portlet in DXP 7.1
This article details how to optimize the Announcement portlet using the Customize Announcement Displayed feature in Liferay Digital Experience Platform (DXP) 7.1. The Announcements app allows users to broadcast...
Creating High Contrast Color Themes in Liferay DXP 7.0
Beginning with DXP 7.1, the Liferay platform makes use of Clay, which is the implementation of Lexicon 2.0 and the Lexicon Experience Language. This version provides improved accessibility with the offering of...
Creating Custom Validation Scripts on Web Form Portlet With DXP 7.0
This article documents how to use the custom validation script feature in the Web Form Portlet on Liferay DXP 7.0. Users might have used the same feature on Liferay Portal 6.2 and wonder which features are the same and...
Configuring Liferay DXP as SP and OKTA as IdP
This article documents the basic steps users need to execute in order to set up their instance of Liferay DXP as SP, and OKTA as IdP. Resolution OKTA Configuration Log in to OKTA and navigate to Admin > Add Application...
Requesting a New Feature or Feature Improvement
As an open-source company, Liferay has always highly valued feedback and suggestions from our community of users on how to continually improve our products. Creating and Upvoting...
Disabling Email Notifications With the Blogs Portlet
There may be instances in which an administrator would like to disable the ability for the creator of blog entries to receive email notifications when an entry is added or updated, or...
Adding Custom Password Reminder Questions
This article provides step-by-step instructions on how Liferay Portal, or Liferay Digital Enterprise 7.0, administrators can enable and leverage the user reminder queries. In addition, this article also documents how...
Changing the Page Title in DXP 7.x
By default, the page title in Liferay Digital Experience Platform 7.x displays in the format of Page Name - (Site Name) -  Portal Name. This article documents how to change the portal name so that all page titles contain...
Can I Create a Remote Live Database from a Copy of the Staging Database?
This article documents Liferay's position on duplicating a database to create a staging environment. The Use Case In order to enable Remote Live Staging, system administrators must have two databases: a staged...
Document Library Permissions Are Not Inherited Between Parent and Child Folders/Files
This article describes the behavior in which permissions do not propagate from the parent folders to the files or children folders uploaded in the Document Library. Also, this article...
Updating Plugins After Applying a Patch
This article documents several possible solutions for updating plugins after a new fix pack has been installed. Specifically, customers have found that a plugin's libraries are not patched at the same time as the...
Hiding Sensitive Server Details on the License Page
This article documents how to hide sensitive server details, such as the IP Addresses or MAC Addresses, when an administrator deploys an invalid activation key. This poses a security risk because the information is in...