Expand my Community achievements bar.

Submissions are now open for the 2026 Adobe Experience Maker Awards.
SOLVED

How can we show only gated (Secure) Content for End User ?

Avatar

Level 3

Hi Team,

How can we display gated content (visible only after the user logs in) through the Dispatcher?

 

Example: I want to display a specific course to users after they log in to the website.

 

Thanks in advance,

 Syed Shaik.

 

1 Accepted Solution

Avatar

Correct answer by
Level 5

HI @Syed_Shaik 

You cannot directly show gated content through cached Dispatcher pages — you must either:

Exclude gated paths from caching (auth required), or

Serve public shells + gated content via authenticated API calls

Use Authentication + Cache Segmentation

Protect gated content paths in Dispatcher configuration:
In your dispatcher.any (or .farm file), under /cache, deny caching for secure areas:

/cache
{
  /rules
  {
    /0000 { /glob "*" /type "allow" }
    /0001 { /glob "/content/secure/*" /type "deny" }
  }
}

Protect access using Apache authentication or SSO integration.

Example (in httpd.conf or vhost.conf):

<Location /content/secure>
    AuthType Basic
    AuthName "Restricted Area"
    AuthUserFile /etc/httpd/conf/.htpasswd
    Require valid-user
</Location>

Once authenticated, the request passes through Dispatcher (uncached) to AEM, which delivers the page.

 

Hope this helpful:)

 

Regards,

Karishma.

 

 

 

View solution in original post

2 Replies

Avatar

Correct answer by
Level 5

HI @Syed_Shaik 

You cannot directly show gated content through cached Dispatcher pages — you must either:

Exclude gated paths from caching (auth required), or

Serve public shells + gated content via authenticated API calls

Use Authentication + Cache Segmentation

Protect gated content paths in Dispatcher configuration:
In your dispatcher.any (or .farm file), under /cache, deny caching for secure areas:

/cache
{
  /rules
  {
    /0000 { /glob "*" /type "allow" }
    /0001 { /glob "/content/secure/*" /type "deny" }
  }
}

Protect access using Apache authentication or SSO integration.

Example (in httpd.conf or vhost.conf):

<Location /content/secure>
    AuthType Basic
    AuthName "Restricted Area"
    AuthUserFile /etc/httpd/conf/.htpasswd
    Require valid-user
</Location>

Once authenticated, the request passes through Dispatcher (uncached) to AEM, which delivers the page.

 

Hope this helpful:)

 

Regards,

Karishma.

 

 

 

Avatar

Employee Advisor

You can use Permission Sensitive Caching so the dispatcher validates first if a file can be delivered to a requesting user. See https://experienceleague.adobe.com/en/docs/experience-manager-dispatcher/using/configuring/permissio...