Showing posts with label Sitecore 9.1 Identity Server disabled. Show all posts
Showing posts with label Sitecore 9.1 Identity Server disabled. Show all posts

Wednesday 12 June 2019

Sitecore 9.1 : Access denied error when trying to open Sitecore admin page without login when identity server is disabled



Hello Sitecore Devs,

We have a Sitecore 9.1 instance (initial release) where Identity Server is disabled.

To know more about Identity server follow this link : 


If you want to disable identity Server for some reason, Sitecore OOTB provides 2 disabler configs namely,

Sitecore.Owin.Authentication.Disabler.config
Sitecore.Owin.Authentication.IdentityServer.Disabler.config

I found one strange thing on my Sitecore instance after the identity server is disabled.

Whenever I tried to open any admin page (e.g. http://<yourhostname>/sitecore/admin) without login, instead of redirecting me to the login page it was showing me access denied error page.

This was something unexpected. So, I raised a Support ticket with Sitecore to understand this behavior.

Sitecore Support accepted this as a bug in Sitecore 9.1.

Now what’s the solution?

As per Sitecore they would no longer provide patches for Sitecore 9.1 or later versions.

Check the Sitecore KB article on this: https://kb.sitecore.net/articles/077333

But they were kind on me. They did mention a workaround for this.
  • Create an item under the item '/sitecore/system/Aliases' using Alias item
  • Insert an external link. For example, create the admin item with the link http://<HostName>/sitecore/login?ReturnUrl=%2fsitecore%2fadmin%2f
  • The shell item - with the link http://<HostName>/sitecore/login
  • Publish your items.

View below screencast to reproduce and fix the issue: https://www.screencast.com/t/koGEsQDXszn

That’s it for now!!!