Capability

Security

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Feature
Deployment Approach
Capability
Accounts
Accounts Available 7.4+ Accounts provide administrators with a way to organize and manage users for various commerce or business needs. Unlike organizations or user groups, accounts help...
Published Date: May 9, 2024 6:59 PM
Account Management Widget
Account Management Widget Available 7.4+ Use Account Management widget to manage and access account information from any page. This provides access for those without permission to view the Control...
Published Date: May 9, 2024 6:59 PM
Account Roles
Account Roles Available 7.4+ Create different account roles with specific permissions and assign them to account users to manage access to accounts. There are two types of account roles: ...
Published Date: May 9, 2024 6:59 PM
Adding Subtypes to Account Addresses
Adding Subtypes to Account Addresses Liferay DXP 2025.Q2+ In addition to billing and shipping address types, administrators can define and assign custom subtypes for account addresses. This...
Published Date: May 20, 2025 6:08 PM
Connecting to a User Directory
Connecting to a User Directory LDAP (Lightweight Directory Access Protocol) is a common user store for Liferay DXP. You can import user information from an LDAP server into Liferay or export...
Published Date: May 9, 2024 6:59 PM
Account Addresses
Account Addresses Available 7.4+ Account addresses are the billing or shipping addresses associated with Business or Person accounts. Adding an Account Address Open the Global Menu (Global...
Published Date: May 9, 2024 6:59 PM
Account Groups
Account Groups Available 7.4+ Use Account Groups to organize related accounts. For example, group accounts by region (Americas, Asia Pacific, Europe, etc.). Creating an Account Group Open the...
Published Date: May 9, 2024 6:59 PM
Account Users
Account Users For Liferay 7.4 U55+/GA55+ Once you've created an account, you can associate existing users with it manually. Alternatively, you can create and associate users with an account...
Published Date: May 9, 2024 6:59 PM
Contacts
Contacts Liferay DXP 2024.Q2+/Portal GA120+ Using the new Contact tab on an account, you can add contact details related to the account: Addresses Phone Numbers Email Addresses Websites ...
Published Date: May 9, 2024 6:59 PM
Using Workflow with Accounts
Using Workflow with Accounts Liferay 7.4 U49+/GA49+ Accounts are fully integrated with Liferay's workflow engine, so you can enable an approval process for account creation. To enable a workflow...
Published Date: May 9, 2024 6:59 PM
Configuring User Import and Export
Configuring User Import and Export The import/export settings configure mappings between LDAP and Liferay to match users between the two systems. Finding Users in Your LDAP Directory...
Published Date: May 9, 2024 6:59 PM
Connecting to an LDAP Directory
Connecting to an LDAP Directory Lightweight Directory Access Protocol (LDAP) servers are common user stores for Liferay DXP. You can configure LDAP at the system scope in System Settings or at the...
Published Date: May 9, 2024 6:59 PM
LDAP Configuration Reference
LDAP Configuration Reference To access LDAP configuration settings, open the Global Menu (Applications Menu icon) and navigate to Control Panel → Configuration → Instance Settings → Security →...
Published Date: May 9, 2024 6:59 PM
Managing User Data (GDPR)
Managing User Data (GDPR) Liferay's User Associated Data (UAD) framework assists you in meeting two of the General Data Protection Regulation's (GDPR) technically challenging requirements: The...
Published Date: Nov 22, 2024 10:53 PM
Configuring the Anonymous User
Configuring the Anonymous User Internet users are increasingly and justifiably concerned about how their personal data is processed by the systems they use. Liferay is aware of the need for...
Published Date: May 9, 2024 6:59 PM
Liferay's Default Cookies Reference
Liferay's Default Cookies Reference Strictly Necessary Cookies Cookie NamePurposeDuration COOKIE_SUPPORTStores the user's preference (true/false) to store cookies in the browser.365 Days...
Published Date: Sep 25, 2024 3:44 PM
Exporting User Data
Exporting User Data One of the General Data Protection Regulation's (GDPR) tenets is that Users have a right to data portability. Data portability means that users have the right to receive their...
Published Date: Nov 22, 2024 10:53 PM
Managing Third-Party Cookies
Managing Third-Party Cookies Liferay DXP 2024.Q1+/Portal GA112+ Third-party cookies are generated by domains different from the one a user is currently visiting. These cookies are often used by...
Published Date: Nov 22, 2024 10:53 PM
Sanitizing User Data
Sanitizing User Data One of the technically challenging requirements of the General Data Protection Regulation (GDPR) is the right to be forgotten. The purpose here is not to go into the details of...
Published Date: Nov 22, 2024 10:53 PM
Organizations
Organizations Organizations in Liferay can enable distributed user and site management that reflects real world organizational hierarchies. Organizations can nest to an unlimited number of...
Published Date: Nov 22, 2024 10:53 PM
Adding a New Organization Type
Adding a New Organization Type By default, Liferay DXP only includes the Organization type. You can configure the existing type or add additional types in System Settings → Users → Organization...
Published Date: Nov 22, 2024 10:53 PM
Adding Users to Organizations
Adding Users to Organizations With Liferay organizations, you can manage users and permissions to model your real-life organizational hierarchy, which can then be quickly implemented in...
Published Date: Jan 18, 2025 2:51 AM
Creating and Managing Organizations
Creating and Managing Organizations If you're not sure what Organizations are or whether you need them, start here. Adding Organizations Click Users and Organizations from Control Panel → Users....
Published Date: Jan 18, 2025 2:51 AM
Organization Roles
Organization Roles Liferay Organizations provide a convenient way to implement distributed User management. With them, you can use Organization-scoped Roles to assign standard permissions to all...
Published Date: Jan 18, 2025 2:51 AM
Organization Sites
Organization Sites Liferay Organizations enable distributed User management, providing a convenient way to organize and manage instance users and roles to reflect your organizational hierarchy....
Published Date: Jan 18, 2025 2:51 AM
Configuring a Password Policy
Configuring a Password Policy Password policies enhance the security of your installation. You can use the default policy that ships with Liferay (modified or as is), or you can create your own...
Published Date: Jan 18, 2025 2:51 AM
Roles and Permissions
Roles and Permissions To get things done in Liferay DXP, users must have the proper permissions. Roles join users with permissions. Most administrative work for roles and permissions is done in...
Published Date: Jan 18, 2025 2:51 AM
Assigning Roles to User Segments
Assigning Roles to User Segments Liferay DXP 7.2 SP2+, Liferay CE 7.3.1 GA2+ User segments are dynamically assigned user collections. If a segment can be well-defined with the available criteria,...
Published Date: Jan 18, 2025 2:51 AM
Assigning Users to Roles
Assigning Users to Roles The location of a role's assignment UI corresponds with the Role's scope. Regular Roles Globally scoped regular roles are available for configuration in the DXP Control...
Published Date: Jan 18, 2025 2:51 AM
Creating and Managing Roles
Creating and Managing Roles Once you understand roles and permissions, you can create the roles and empower your users to work within your Liferay DXP solution. Create and manage roles in Control...
Published Date: Nov 22, 2024 10:53 PM
Default Roles Reference
Default Roles Reference All roles available in a Liferay DXP installation can be viewed in the Roles administrative application, organized by scope. Navigate there using Control Panel → Users →...
Published Date: Jan 18, 2025 2:51 AM
Defining Role Permissions
Defining Role Permissions Roles collect permissions, so when users are given a role, they inherit all its permissions. If you create a role with permission to access something in the Control...
Published Date: Jan 18, 2025 2:51 AM
Understanding Roles and Permissions
Understanding Roles and Permissions To give users the necessary permissions to perform their intended function within Liferay DXP, you must first associate the set of permissions with a role. ...
Published Date: Jan 18, 2025 2:51 AM
Service Accounts
Service Accounts A service account is a common abstraction in systems used to make authenticated API requests on behalf of the system. Every virtual instance in Liferay comes with one service...
Published Date: Oct 12, 2024 4:41 PM
User Groups
User Groups Creating and Managing User Groups Managing Site Membership and Permissions with User Groups User Group Sites
Published Date: Jan 18, 2025 2:51 AM
Creating and Managing User Groups
Creating and Managing User Groups A user group is a list of users created for a specific purpose. User groups can be created across the hierarchical boundaries of organizations. For example, an...
Published Date: Jan 18, 2025 2:51 AM
Managing Site Membership and Permissions with User Groups
Managing Site Membership and Permissions with User Groups You can use user groups to manage site membership, roles, and permissions. Managing Site Membership with User Groups One of the primary...
Published Date: Jan 18, 2025 2:51 AM
User Group Sites
User Group Sites With user group sites, you can create pages that are added automatically to each member’s personal site. These pages are organized into two page sets, My Profile (public) and My...
Published Date: Jan 18, 2025 2:51 AM
Users
Users Every person who accesses a Liferay site is considered a user. Unauthenticated users are considered Guest users. Liferay ships out-of-the-box with a default admin user who has complete...
Published Date: Jan 18, 2025 2:51 AM
Adding and Managing Users
Adding and Managing Users Core user management activities include adding, editing, and deleting users. These activities are typically restricted to Administrative users. Adding Users Open the...
Published Date: Jan 18, 2025 2:51 AM