Site Search - Liferay Learn

Configuring Logging In the Server Administration panel's Log Levels tab, you can set logging levels for classes and packages in Liferay DXP's class hierarchy and add custom objects to be similarly...

Invoking Liferay Services From Scripts

Official Documentation

Invoking Liferay Services From Scripts Many scripting scenarios require invoking Liferay services. Liferay *ServiceUtil classes are the fastest and most convenient way to invoke Liferay services in...

Configuring a Shutdown Event

Official Documentation

Configuring a Shutdown Event In the Shutdown tab you can initiate a graceful shutdown event, warning Users of the impending shutdown and instructing them to save any work in progress. When you...

Configuring External Services

Official Documentation

Configuring External Services Liferay provides integration with external services for converting files and generating file previews. Three of these services can be enabled in the Server...

Troubleshooting Liferay Performance Issues with Glowroot

Official Documentation

Troubleshooting Liferay Performance Issues with Glowroot Liferay DXP 2023.Q4+/Portal GA100+ Use Glowroot to identify and diagnose performance issues in your Liferay installation. The following...

Using the Script Engine

Official Documentation

Using the Script Engine Liferay provides a robust script engine for executing Groovy scripts. You can execute scripts to perform maintenance tasks involving data cleanup, user maintenance...

Troubleshooting Templates with Glowroot Freemarker Plugin

Official Documentation

Troubleshooting Templates with Glowroot Freemarker Plugin Liferay DXP 2023.Q4+/Portal GA100+ Glowroot can troubleshoot FreeMarker templates to pinpoint slow transactions. Configuring the...

Managing System Resources

Official Documentation

Managing System Resources The Server Administration panel's Resources tab contains several features, all related to low-level monitoring and management of the system's resources: FunctionPurpose...

Authenticating with CAS (Central Authentication Service)

Official Documentation

Authenticating with CAS (Central Authentication Service) CAS was deprecated as of Liferay DXP 7.2 and removed as of Liferay DXP 7.4. Please use SAML instead. CAS is a widely used open source...

Authenticating with SAML

Official Documentation

Authenticating with SAML Subscription The SAML (Security Assertion Markup Language) adapter provides Single Sign On (SSO) and Single Log Off (SLO) in your deployment. SAML works by using Identity...

Authenticating with Kerberos

Official Documentation

Authenticating with Kerberos You can use Kerberos to authenticate Microsoft Windows™ accounts with Liferay DXP, using Liferay DXP's LDAP support and a web server that supports the Kerberos...

Configuring SAML at the System Level

Official Documentation

Configuring SAML at the System Level Subscription Before allowing any portal instances to enable SAML authentication, you should configure it at the system level so those instances have a...

Securing Sign-In

Official Documentation

Securing Sign-In The Sign-In widget calls the various mechanisms (the portal database, an LDAP server, a SAML identity provider, or any of the ways users can authenticate) that authenticate users....

Configuring Password Encryption Algorithms and Stored Password Formats

Official Documentation

Configuring Password Encryption Algorithms and Stored Password Formats Liferay encrypts passwords using an algorithm that aligns with the recommendations from the OWASP Password Storage Cheat...

Securing Liferay

Official Documentation

Securing Liferay Liferay is built with security in mind. This includes mitigation of common security vulnerabilities and exploits like those described by the OWASP Top 10 and the CWE/SANS Top 25. ...

Configuring SAML at the Instance Level

Official Documentation

Configuring SAML at the Instance Level Subscription Each portal instance can be a SAML provider, either an Identity Provider (IdP) or a Service Provider (SP). Whichever role your DXP instance...

Configuring Sign-In

Official Documentation

Configuring Sign-In By default, Liferay DXP uses the Sign In widget to authenticate users. The Sign In widget appears on the default home page at http[s]://[server-name:port]/web/guest/home. If...

Configuring Authentication Types

Official Documentation

Configuring Authentication Types Users can be configured to log in using one of three authentication types: Authentication TypeDescriptionUsed by Default? Screen NameDetermined by administrator or...

Configuring Single Sign-On

Official Documentation

Configuring Single Sign-On Liferay Portal/DXP supports many ways of authenticating, from token-based solutions to standards such as OpenID Connect and SAML. With all the available options, you...

Importing User Groups' Memberships from an External IdP through SAML

Official Documentation

Importing User Groups' Memberships from an External IdP through SAML Subscription This feature was released behind a dev feature flag. It was made Generally Available (GA) in Liferay DXP...

SAML Authentication Process Overview

Official Documentation

SAML Authentication Process Overview Subscription Both the IdP and the SP can initiate the Single Sign On process, and the SSO flow is different depending on each one. Regardless of how it's...

Token-based Single Sign On Authentication

Official Documentation

Token-based Single Sign On Authentication Token-based SSO authentication was introduced in Liferay Portal 7.0 to standardize support for Shibboleth, SiteMinder, Oracle OAM, and any SSO product that...

Setting Service Access Policies

Official Documentation

Setting Service Access Policies Service Access Policies define what services or service methods can be invoked remotely. You can apply many of them at once to produce a combined effect. They are...

Configuring Liferay Authentication With Auth0 Using OpenId Connect

Official Documentation

Configuring Liferay Authentication With Auth0 Using OpenId Connect This tutorial guides you through integrating Auth0, your Identity Provider (IdP), with your Liferay environment using OpenID...

Using OpenAM

Official Documentation

Using OpenAM Deprecated in Liferay DXP 2024.Q4/Portal GA129 OpenAM 13 is deprecated as of Liferay DXP 2024.Q4/Portal GA129. OpenAM 12 and below were deprecated as of Liferay DXP 7.2. Versions of...

Multi-Factor Authentication

Official Documentation

Multi-Factor Authentication Subscription Liferay DXP 7.3+ Multi-Factor Authentication (MFA) provides better security by requiring users to prove their identity in multiple ways, or factors. The...

Configuring Liferay Authentication With Okta Using OpenId Connect

Official Documentation

Configuring Liferay Authentication With Okta Using OpenId Connect This tutorial guides you through the basic steps needed to integrate Okta, your Identity Provider (IdP), with your environment...

Configuring Liferay Authentication With PingOne Using SAML

Official Documentation

Configuring Liferay Authentication With PingOne Using SAML This tutorial guides you through the basic steps needed to integrate PingOne, your Identity Provider (IdP), with your Liferay environment...

Iframe Sanitizer

Official Documentation

Iframe Sanitizer Liferay DXP 2025.Q4+ Liferay DXP includes an iframe sanitizer that controls how iframes are handled across each instance. Iframes can introduce security risks if they load...

AntiSamy

Official Documentation

AntiSamy Liferay DXP includes an AntiSamy module that protects against user-entered malicious code. If your site allows users to post content in message boards, blogs, or other applications, these...

LDAP Configuration Reference

Official Documentation

LDAP Configuration Reference Access LDAP configuration settings from the Global Menu (Applications Menu icon): Control Panel → Configuration → Instance Settings → Security → LDAP Control Panel...

Configuring the Anonymous User

Official Documentation

Configuring the Anonymous User Internet users are increasingly and justifiably concerned about how their personal data is processed by the systems they use. Liferay is aware of the need for...

Managing User Data (GDPR)

Official Documentation

Managing User Data (GDPR) Liferay's User Associated Data (UAD) framework assists you in meeting two of the General Data Protection Regulation's (GDPR) technically challenging requirements: The...

Liferay's Default Cookies Reference

Liferay's Default Cookies Reference Strictly Necessary Cookies Cookie NamePurposeDuration COOKIE_SUPPORTStores the user's preference (true/false) to store cookies in the browser.365 Days...

Exporting User Data

Official Documentation

Exporting User Data One of the General Data Protection Regulation's (GDPR) tenets is that Users have a right to data portability. Data portability means that users have the right to receive their...

Consent Management Platform (CMP) Integration

Official Documentation

Consent Management Platform (CMP) Integration

Managing Privacy Settings (2026.Q1 and Earlier)

Official Documentation

Managing Privacy Settings (2026.Q1 and Earlier) You can ensure GDPR compliance for your cookies using Liferay's configuration interface. You can access the privacy settings at different scopes....

Managing Third-Party Cookies

Official Documentation

Managing Third-Party Cookies Liferay DXP 2024.Q1+/Portal GA112+ Third-party cookies are generated by domains different from the one a user is currently visiting. These cookies are often used by...

Managing Privacy Settings

Official Documentation

Managing Privacy Settings Manage cookie consent and GDPR compliance for your sites using Liferay DXP's built-in consent manager. Configure a cookie banner and panel, set consent renewal periods,...

Adding a New Organization Type

Official Documentation

Adding a New Organization Type By default, Liferay DXP only includes the Organization type. You can configure the existing type or add additional types in System Settings → Users → Organization...

Organization Roles

Official Documentation

Organization Roles Liferay Organizations provide a convenient way to implement distributed User management. With them, you can use Organization-scoped Roles to assign standard permissions to all...

Creating and Managing Organizations

Official Documentation

Creating and Managing Organizations If you're not sure what Organizations are or whether you need them, start here. Adding Organizations Click Users and Organizations from Control Panel → Users....

Sanitizing User Data

Official Documentation

Sanitizing User Data One of the technically challenging requirements of the General Data Protection Regulation (GDPR) is the right to be forgotten. The purpose here is not to go into the details of...

Adding Users to Organizations

Official Documentation

Adding Users to Organizations With Liferay organizations, you can manage users and permissions to model your real-life organizational hierarchy, which can then be quickly implemented in...

Organizations

Official Documentation

Organizations Organizations in Liferay can enable distributed user and site management that reflects real world organizational hierarchies. Organizations can nest to an unlimited number of...

Configuring a Password Policy

Official Documentation

Configuring a Password Policy Password policies enhance the security of your installation. You can use the default policy that ships with Liferay (modified or as is), or you can create your own...

Default Roles Reference

Official Documentation

Default Roles Reference All roles available in a Liferay DXP installation can be viewed in the Roles administrative application, organized by scope. Navigate there using Control Panel → Users →...

Understanding Roles and Permissions

Official Documentation

Understanding Roles and Permissions To give users the necessary permissions to perform their intended function within Liferay DXP, you must first associate the set of permissions with a role. ...

Assigning Users to Roles

Official Documentation

Assigning Users to Roles The location of a role's assignment UI corresponds with the Role's scope. Regular Roles Globally scoped regular roles are available for configuration in the DXP Control...

Creating and Managing Roles

Official Documentation

Creating and Managing Roles Once you understand roles and permissions, you can create the roles and empower your users to work within your Liferay DXP solution. Create and manage roles in Control...

Standard Permissions

Official Documentation

Standard Permissions Liferay defines several standard permissions across various applications and resources, such as view, edit, update, and more. Managing permissions Permissions are best managed...

Roles and Permissions

Official Documentation

Roles and Permissions To get things done in Liferay DXP, users must have the proper permissions. Roles join users with permissions. Most administrative work for roles and permissions is done in...

Assigning Roles to User Segments

Official Documentation

Assigning Roles to User Segments Liferay DXP 7.2 SP2+, Liferay CE 7.3.1 GA2+ User segments are dynamically assigned user collections. If a segment can be well-defined with the available criteria,...

Organization Sites

Official Documentation

Organization Sites Liferay Organizations enable distributed User management, providing a convenient way to organize and manage instance users and roles to reflect your organizational hierarchy....

Defining Role Permissions

Official Documentation

Defining Role Permissions Roles collect permissions, so when users are given a role, they inherit all its permissions. If you create a role with permission to access something in the Control...

Multi-Factor Authentication Checkers

Official Documentation

Multi-Factor Authentication Checkers Subscription Liferay DXP 7.4 ships with two additional factor checkers for Multi-Factor Authentication. Both of them are disabled by default, because they're...

Using Multi-Factor Authentication

Official Documentation

Using Multi-Factor Authentication Subscription To enhance your installation's security, you should disable less secure, one-factor forms of authentication, such as Basic Auth, Digest Auth, and...

Securing Web Services

Official Documentation

Securing Web Services Liferay DXP provides four security layers for web services: IP permission layer: The IP address from which a web service invocation request originates must be white-listed in...

Configuring Content Security Policy Headers

Official Documentation

Configuring Content Security Policy Headers Modern browsers use Content Security Policy HTTP response headers to enhance web pages' security to mitigate certain types of attacks (like Cross-Site...

SAML Admin

Official Documentation

SAML Admin Subscription The SAML Admin panel is the best place to configure your SAML instance. Use it instead of Instance Settings to streamline your SAML administration experience. Starting...

Search Results