Site Search - Liferay Learn

Authenticating with SAML Subscription The SAML (Security Assertion Markup Language) adapter provides Single Sign On (SSO) and Single Log Off (SLO) in your deployment. SAML works by using Identity...

Configuring Liferay Authentication With Auth0 Using OpenId Connect

Official Documentation

Configuring Liferay Authentication With Auth0 Using OpenId Connect This tutorial guides you through integrating Auth0, your Identity Provider (IdP), with your Liferay environment using OpenID...

Configuring Liferay Authentication With Okta Using OpenId Connect

Official Documentation

Configuring Liferay Authentication With Okta Using OpenId Connect This tutorial guides you through the basic steps needed to integrate Okta, your Identity Provider (IdP), with your environment...

Configuring Liferay Authentication With PingOne Using SAML

Official Documentation

Configuring Liferay Authentication With PingOne Using SAML This tutorial guides you through the basic steps needed to integrate PingOne, your Identity Provider (IdP), with your Liferay environment...

Token-based Single Sign On Authentication

Official Documentation

Token-based Single Sign On Authentication Token-based SSO authentication was introduced in Liferay Portal 7.0 to standardize support for Shibboleth, SiteMinder, Oracle OAM, and any SSO product that...

Blacklisting OSGi Components

Official Documentation

Blacklisting OSGi Components The Component Blacklist is a convenient way to manage multiple OSGi Declarative Service Components (components). The list is an OSGi configuration that DXP uses to...

Configuring Portlets, Themes, and Layout Templates

Official Documentation

Configuring Portlets, Themes, and Layout Templates The Components listing is the easiest way to configure portlets, themes, and layout templates. In the Components UI, you can enable/disable them...

Using Glowroot with Liferay

Official Documentation

Using Glowroot with Liferay Liferay DXP 2023.Q4+/Portal GA100+ Liferay bundles Glowroot, the open source Java application monitoring tool. The tool displays helpful statistics about your system...

Liferay Performance Use Cases with Glowroot

Official Documentation

Liferay Performance Use Cases with Glowroot Liferay DXP 2023.Q4+/Portal GA100+ Use Glowroot to diagnose and inform you on making performance improvements to your Liferay installation. Here are a...

Troubleshooting Liferay Performance Issues with Glowroot

Official Documentation

Troubleshooting Liferay Performance Issues with Glowroot Liferay DXP 2023.Q4+/Portal GA100+ Use Glowroot to identify and diagnose performance issues in your Liferay installation. The following...

Using the App Manager

Official Documentation

Using the App Manager The App Manager is a Control Panel screen where you can install, uninstall, activate, and deactivate apps in your DXP installation. You can also use it to inspect details for...

Renewing Apps

Official Documentation

Renewing Apps To continue using a purchased app whose license has expired, you must renew your app subscription. Here are the steps: Go to https://web.liferay.com/marketplace. Click your...

Using Marketplace

Official Documentation

Using Marketplace Liferay Marketplace is a hub for sharing, browsing, and downloading apps. Marketplace leverages the entire Liferay ecosystem to release and share apps in a user-friendly, one-stop...

Developing Glowroot Plugins

Official Documentation

Developing Glowroot Plugins Liferay DXP 2023.Q4+/Portal GA100+ Glowroot provides various out-of-the-box plugins. You can also build your own with the use of their plugin API. Here are some tips...

Troubleshooting JVM Issues with Glowroot

Official Documentation

Troubleshooting JVM Issues with Glowroot Liferay DXP 2023.Q4+/Portal GA100+ Glowroot displays a dashboard for identifying system issues quickly. Click the Errors tab to see a list of tracked...

Troubleshooting Templates with Glowroot Freemarker Plugin

Official Documentation

Troubleshooting Templates with Glowroot Freemarker Plugin Liferay DXP 2023.Q4+/Portal GA100+ Glowroot can troubleshoot FreeMarker templates to pinpoint slow transactions. Configuring the...

Securing Liferay

Official Documentation

Securing Liferay Liferay is built with security in mind. This includes mitigation of common security vulnerabilities and exploits like those described by the OWASP Top 10 and the CWE/SANS Top 25. ...

Managing System Resources

Official Documentation

Managing System Resources The Server Administration panel's Resources tab contains several features, all related to low-level monitoring and management of the system's resources: FunctionPurpose...

Configuring Password Encryption Algorithms and Stored Password Formats

Official Documentation

Configuring Password Encryption Algorithms and Stored Password Formats Liferay encrypts passwords using an algorithm that aligns with the recommendations from the OWASP Password Storage Cheat...

Configuring Sign-In

Official Documentation

Configuring Sign-In By default, Liferay DXP uses the Sign In widget to authenticate users. The Sign In widget appears on the default home page at http[s]://[server-name:port]/web/guest/home. If...

Configuring Authentication Types

Official Documentation

Configuring Authentication Types Users can be configured to log in using one of three authentication types: Authentication TypeDescriptionUsed by Default? Screen NameDetermined by administrator or...

Securing Sign-In

Official Documentation

Securing Sign-In The Sign-In widget calls the various mechanisms (the portal database, an LDAP server, a SAML identity provider, or any of the ways users can authenticate) that authenticate users....

Importing User Groups' Memberships from an External IdP through SAML

Official Documentation

Importing User Groups' Memberships from an External IdP through SAML Subscription This feature was released behind a dev feature flag. It was made Generally Available (GA) in Liferay DXP...

Configuring SAML at the System Level

Official Documentation

Configuring SAML at the System Level Subscription Before allowing any portal instances to enable SAML authentication, you should configure it at the system level so those instances have a...

Using OpenID Connect

Official Documentation

Using OpenID Connect OpenID Connect is a lightweight authentication layer that enables users to authenticate using accounts they have on other systems. It's built on top of the OAuth 2.0...

Using OpenAM

Official Documentation

Using OpenAM Deprecated in Liferay DXP 2024.Q4/Portal GA129 OpenAM 13 is deprecated as of Liferay DXP 2024.Q4/Portal GA129. OpenAM 12 and below were deprecated as of Liferay DXP 7.2. Versions of...

Iframe Sanitizer

Official Documentation

Iframe Sanitizer Liferay DXP 2025.Q4+ Liferay DXP includes an iframe sanitizer that controls how iframes are handled across each instance. Iframes can introduce security risks if they load...

Multi-Factor Authentication

Official Documentation

Multi-Factor Authentication Subscription Liferay DXP 7.3+ Multi-Factor Authentication (MFA) provides better security by requiring users to prove their identity in multiple ways, or factors. The...

Using Multi-Factor Authentication

Official Documentation

Using Multi-Factor Authentication Subscription To enhance your installation's security, you should disable less secure, one-factor forms of authentication, such as Basic Auth, Digest Auth, and...

Multi-Factor Authentication Checkers

Official Documentation

Multi-Factor Authentication Checkers Subscription Liferay DXP 7.4 ships with two additional factor checkers for Multi-Factor Authentication. Both of them are disabled by default, because they're...

Fast IDentity Online 2

Official Documentation

Fast IDentity Online 2 Subscription Available: Liferay DXP/Portal 7.4+ The Fast IDentity Online 2 or FIDO2 standard allows for the use of biometrics (i.e., fingerprint readers), mobile devices,...

Securing Web Services

Official Documentation

Securing Web Services Liferay DXP provides four security layers for web services: IP permission layer: The IP address from which a web service invocation request originates must be white-listed in...

Configuring Content Security Policy Headers

Official Documentation

Configuring Content Security Policy Headers Modern browsers use Content Security Policy HTTP response headers to enhance web pages' security to mitigate certain types of attacks (like Cross-Site...

System for Cross-domain Identity Management (SCIM)

Official Documentation

System for Cross-domain Identity Management (SCIM) Subscription Liferay DXP 2024.Q1+ System for Cross-domain Identity Management or SCIM, is an open standard that automates user provisioning. In...

AntiSamy

Official Documentation

AntiSamy Liferay DXP includes an AntiSamy module that protects against user-entered malicious code. If your site allows users to post content in message boards, blogs, or other applications, these...

Users and Permissions

Official Documentation

Users and Permissions Liferay comes with a comprehensive framework to manage user access and roles within Liferay. To support complex organizational needs, there are several entities within the...

Account Addresses

Official Documentation

Account Addresses Available 7.4+ Account addresses are the billing or shipping addresses associated with Business or Person accounts. Adding an Account Address Open the Global Menu (Global...

Account Management Widget

Official Documentation

Account Management Widget Available 7.4+ Use Account Management widget to manage and access account information from any page. This provides access for those without permission to view the Control...

Using Authentication Verifiers

Official Documentation

Using Authentication Verifiers Authentication Verifiers authenticate remote invocations of Liferay Portal's API in a centralized and extensible way. They have two main responsibilities: Verify...

Setting Up CORS

Official Documentation

Setting Up CORS CORS stands for Cross-Origin Resource Sharing. An Origin is a web server at a different domain, and a Resource is some asset stored on the server, like an image, PDF, or HTML file....

Search Results