How to restrict page view with CUG when SAML authentication is configured

[abhijitthete]

We are using SAML authentication to access our site. Within same content tree, I want to restrict access to some pages based on user group. The AEM groups are synced based on SAML response.

Is this possible by adding CUG without configuring Login Page? Is there another solution to achieve this?

[arunpatidar]

Hi @abhijitthete 

Yes, you need to add CUG (Closed User Group) groups to the pages that are meant to be restricted.

[abhijitthete]

I created a CUG and added required permission, enabled authentication but it did not worked. My structure is

/content/site  SAML authentication required for this path. User is added to groups available in SAML response. If user has GroupA, it is added in AEM GroupA.

Requirement particular page from /content/site should be accessible to users belonging to GroupA only

/content/site/pageA - This page should be accessible to users from GroupA only.

I tried editing pageA properties and added Authentication required, permissions for GroupA but it does not worked. Users not member of GroupA can still access pageA.

[konstantyn_diachenko]

Hi @abhijitthete ,

Do you test it through publisher or dispatcher? 

If the 2nd option, you will need to check a cache. Probably you cache authorized data. Check the /allowAuthorized in the dispatcher configuration.

Best regards,

Kostiantyn Diachenko.

[arunpatidar]

Hi @abhijitthete 

Try to test the page without cache.

With cache you need following implementation:

https://experienceleague.adobe.com/en/docs/experience-manager-dispatcher/using/configuring/permissio...

https://adobe-consulting-services.github.io/acs-aem-commons/features/utils-and-apis/permission-sensi...