Skip to main content
Nov 29, 2016 10:05 AM UTC
Solved

Site User management in AEM

Hi,

Can someone clarify me. I am authenticating users of my site from salesforce for the first time by API call. After the successful login I store the user details in AEM using user management concept. If the user login for second time I fetch the details from AEM itself. My doubt is whether this logic is work in live environment?  Shall I store the site users as  AEM Users[Everyone/Anonymous]  along with Groups and ACLs concept in AEM. 

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Jitendra_S_Toma
Jitendra_S_TomaAccepted solution
Level 10
Nov 30, 2016 5:12 PM UTC

Hi Robert,

When you have third party authentication in AEM, you would not be able to do the authorization part unless user is available in AEM.  And the reason is pretty much clear. Every resource is in AEM but user permissions for any resource are store somewhere else (hypothetically). Then how would you authorized a user for the particular resource.

Regards,

Jitendra

2 replies

smacdonald2008
Level 10
Nov 29, 2016 12:53 PM UTC

Storing users in AEM and setting up ACL groups, etc is always best practice as per the docs: 

https://docs.adobe.com/docs/en/aem/6-2/administer/security/security.html

Translate
Jitendra_S_Toma
Jitendra_S_TomaAccepted solution
Level 10
Nov 30, 2016 5:12 PM UTC

Hi Robert,

When you have third party authentication in AEM, you would not be able to do the authorization part unless user is available in AEM.  And the reason is pretty much clear. Every resource is in AEM but user permissions for any resource are store somewhere else (hypothetically). Then how would you authorized a user for the particular resource.

Regards,

Jitendra

Translate