Configuring Sign In

Configuring Sign In

Liferay’s sign-in widget is configurable and adjusts to how you’ve set its options. In a prior step, you configured two virtual instances. One of these is for a public-facing, external website. The other is for an internal intranet meant for employees or partners.

Guest users should be able to access the external site and register for accounts to purchase products, participate in forums, submit recipes, and otherwise interact with Delectable Bonsai. In contrast, no one should have access to the internal website except for users who have been registered by administrators. For this reason, you must adjust authentication differently for the two sites.

Configuring Authentication on the Public Website

  1. Navigate to the main (public) website at http://localhost:8080.

  2. Log in as the administrator, Kyle Klein.

  3. Go to Global MenuInstance SettingsPlatformUser Authentication.

  4. Make sure all boxes are checked except Allow strangers to create accounts with a company email address. Delectable Bonsai wants only members of the Marketing department to have accounts on the public website, and they will be created by administrators.

    Having all boxes checked is appropriate for an external site.

  5. Click Save.

Because it’s a public website, unscrupulous users who register themselves may decide to give themselves a screen name like root or admin. You can prevent that.

  1. Click Reserved Credentials on the left.

  2. In the Screen Names field, type the screen names you don’t want users to have, one per line:

    • admin
    • root
    • president
  3. Click Save.

Since you required users to verify their emails in the previous step, you don’t need to reserve email addresses prospective users can’t access.

Excellent! You’ve now configured authentication for the public website. Now you can move on to the internal website.

Configuring Authentication on the Internal Website

Delectable Bonsai’s internal intranet is called Breakfast, at the domain name You created it in a prior step, and you made Kyle Klein an administrator of that instance. If you didn’t follow those instructions, please follow them now and come back here.

Now you can configure authentication on the internal intranet.

  1. Go to in your browser and log in as Kyle Klein.

  2. Go to Global MenuInstance SettingsPlatformUser Authentication.

  3. This time, change How do users authenticate? to By Screen Name.

  4. Uncheck Allow strangers to create accounts.

  5. Click Save.

Set the options for an internal website.

Internal users authenticate using a screen name given to them by administrators, not by their email addresses.

Awesome! You’ve now configured authentication for the internal website.

Next: Authentication Verifiers

Relevant Concepts

Authentication Basics

User Authentication