Issue
- When navigating to a private page as a guest user, the user does not get redirected to the private page they were attempting to access after logging in.
Environment
- DXP 7.4
Resolution
-
Log in as an administrator and navigate to System Settings > Login and check "Prompt Enabled". This configuration is also available from Instance Settings and Site Settings.
Here's the description (by default this value is
false
):Set this to true to prompt a guest user to login when attempting to access a
protected page resource in the portal.
By setting this value to false, the portal will inform all users that a
requested resource is not found if they have no entitlements to view the
resource. The portal will not prompt for login even if the user is a guest user.
This behavior complies with OWASP best practices.
Additional Information
- This setting was migrated from portal property "auth.login.prompt.enabled" to a site scope configuration: LPS-141291
- For more information on changes to default settings in DXP 7.4, see Default Setting Changes in 7.4