Virtual Happy Hour this month, Jun 28, we'll be getting a sneak preview at our soon to launch SaaS CMS!

Try our conversational search powered by Generative AI!

Combining ActiveDirectory membership and Federated security


We are developing an EPiServer site with both open and protected content ("login to My Page").

We would prefer the following setup:

  • Editors and admins authenticate through Active Directory on the local domain in order to access "/EPiServer" and "/EPiServer/CMS/admin"
  • End users authenticate through a federated security provider when trying to access the protected content.

What would be the best approach to this?

I'm getting the feeling that we would need some sort of ActiveDirectory middleware for the Owin app builder.

Another approach I have considered is to seperate the editor UI to a dedicated editor server and have different authentication config on the two servers. Would I still be able to use the claims from the federated security provider in ACL and visitor groups (these are maybe synced to DB)?

Aug 18, 2015 15:22

Hi, Lars,

Check out this article - Mixed mode Owin authentication. I didn't have a need to use mixed mode in my solution, but from what I remember when reading it, it is a similar usecase as yours.



Aug 19, 2015 10:14
* You are NOT allowed to include any hyperlinks in the post because your account hasn't associated to your company. User profile should be updated.