How to enforce login for a Edge delivery Services pages | Community
Skip to main content
Level 2
June 9, 2025
Solved

How to enforce login for a Edge delivery Services pages

  • June 9, 2025
  • 1 reply
  • 468 views

We are trying to implement  SSO for Edge delivery pages. What is the available configuration for restricting unauthenticated/unauthorized access to EDS pages ?

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by RiturajSi

With EDS, it’s not possible to restrict access to only specific or unauthorized pages. However, EDS does provide a way to secure your entire site using token-based authentication, as outlined in the following documentation: https://www.aem.live/docs/authentication-setup-site.

If your goal is to implement SSO or individual logins for end users, you’ll need to set up custom authentication logic at the CDN level using EdgeWorkers. This would involve writing your own authentication logic to integrate with your Identity Provider (IdP).

Currently, Adobe-managed CDN (Fastly) may not support EdgeWorkers—but please verify this with Adobe, as there may have been recent updates that I haven't reviewed.

That said, you can definitely use your own CDN (BYOCDN) to support this use case.

1 reply

RiturajSiAccepted solution
Level 2
June 30, 2025

With EDS, it’s not possible to restrict access to only specific or unauthorized pages. However, EDS does provide a way to secure your entire site using token-based authentication, as outlined in the following documentation: https://www.aem.live/docs/authentication-setup-site.

If your goal is to implement SSO or individual logins for end users, you’ll need to set up custom authentication logic at the CDN level using EdgeWorkers. This would involve writing your own authentication logic to integrate with your Identity Provider (IdP).

Currently, Adobe-managed CDN (Fastly) may not support EdgeWorkers—but please verify this with Adobe, as there may have been recent updates that I haven't reviewed.

That said, you can definitely use your own CDN (BYOCDN) to support this use case.