4 votes
Accepted

Access Management API error

Error message is pretty clear, you are trying to create 3rd Client Secret for a User that already have max 2 Client Secrets created. In order to create new Client Secret you first need to delete one ...
Stefan Klasnic's user avatar
4 votes
Accepted

Topology manager throws errors after enabling Access Management

Indeed, Topology Manager is still configured to use Windows Authentication on the Core Service. This means you will need to allow mixed-mode authentication for the WCF Core Service. This can be done ...
Rick Pannekoek's user avatar
3 votes

Access Management API error

Let me clarify this (seemingly arbitrary) limitation of max 2 Client Secrets per Account. The reasons why you can define more than one Client Secret per Account is to facilitate "Client Secret ...
Rick Pannekoek's user avatar
3 votes
Accepted

Access Management Containerization

That is definitely possible. As a matter of fact, we are using (Alpine Linux based) Docker Containers for both Access Management and Add-ons Service for internal testing purposes and in our RWS Cloud ...
Rick Pannekoek's user avatar
3 votes

How to create/modify a service account in Access Management?

I have found that the service accounts included in Access Management here are not intended for this use case. These are the accounts that the different Tridion services use to communicate with each ...
Budd Hirons Jr.'s user avatar
3 votes

Access Management account error

The warning message is quite explicit, isn't it? :-) Account '[email protected]' is impersonated by name. This may be an Access Management account and group mappings will not be taken into account. ...
Rick Pannekoek's user avatar
3 votes
Accepted

sample SAML JSON idp provider for Access Management

Answer to your question: A1: If you open up the Set up Single Sign-On with SAML page in the azure, In step 3 SAML Signing certificate section you will see the Certificate (Base64) Download button, ...
Velmurugan's user avatar
  • 8,105
2 votes
Accepted

Unable to Enable Access Management on an existing 9.5 Content Manager Sidebar

Issue resolved after updating manifest.xml as suggested by RWS Support from below path %TRIDION_HOME%\web\SDL\manifests\wcm\manifest.xml below given configuration with Access management URL, restarted ...
Prasanna K Gollamudi's user avatar
2 votes
Accepted

Core services, Content Porter, Template Builder access after installing Access Management

In the Tridion Sites 9.5 Access Management works with Classic Content Manager Explorer and Experience Manager. It does not work with the desktop clients, Template Builder and Content Porter, nor with ...
Velmurugan's user avatar
  • 8,105
1 vote

How to connect Tridion Sites 10 Core service using PowerShell and Access Management

In Tridion Sites 10.0 with Access Management enabled, you can still continue using PowerShell modules to access the Coreservice by enabling basic authentication. Firstly, ensure basic authentication ...
Velmurugan's user avatar
  • 8,105
1 vote
Accepted

Invalid Redirect Uri error while accessing Access Management, After upgraded Access Management 2.0

Log indicates that your configured [AllowedRedirectUris] doesn't contain new redirect URL that you are trying to open. Your new URL https://tridion-dev.xy.net:8443/access-management/signin-oidc In ...
Stefan Klasnic's user avatar
1 vote
Accepted

Tridion Access Management - ForwardClaims issue

There turns out to be a bug in Access Management that old user claims are not removed when the user claims are updated (i.e. when the user logs in). As a result, you will get lots of records in the ...
Rick Pannekoek's user avatar
1 vote

How to extend Expiration Date on Key file | Access Management 9.6

If you wanted to generate a self-signed certificate that expired three years from now you could add the NotAfter switch, for example: $cert = New-SelfSignedCertificate -certstorelocation Cert:\...
RjE's user avatar
  • 716
1 vote
Accepted

Error while configuring Access Management with OpenID Connect identity provider

Yes, Rick was correct. Authority for Azure AD https://login.microsoftonline.com/<TenentDomian or TenentId> Here is the sample OpenIdConnect Idp provider JSON example, In case if you want to ...
Velmurugan's user avatar
  • 8,105
1 vote

Error while configuring Access Management with OpenID Connect identity provider

The Authority for Azure AD is supposed to look like this: https://login.microsoftonline.com/sdl365.onmicrosoft.com So, excluding the /oauth2/v2.0/authorize suffix you have in the URL.
Rick Pannekoek's user avatar
1 vote
Accepted

Tridion Sites 9.5 Access Management with Windows Idp Update and Delete actions not working

It was related to ASP.NET Core with IIS - HTTP Verb Not Allowed. In the ASP.NET Core application enabling the WebDAVModule module does not allow PUT and DELETE requests. This issue has been resolved ...
Velmurugan's user avatar
  • 8,105
1 vote
Accepted

Frequent Popups while working on Classic UI for Sites 9.5

RWS team provided access management hotfix "AccessManagement_1.0.0.25543" which resolved the issue.
Paras's user avatar
  • 81
1 vote
Accepted

How to determine claims and values for Access Management with Windows

As with any Identity Provider, the easiest way to find out which claims are obtained is to open the Identity Provider in the Access Management UI and press the Validate button. This will check if the ...
Rick Pannekoek's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible