Login and Registration of extranet user in sitecore JSS

When we start any application there should be a login and registration of the user for tracking record in sitecore. It helps us to track user activity and analysts too.

Here is a way to achieve that requirement.

Write Below code in your API project it will help you to create a sitecore user.

Copy to Clipboard

private const string UserDomain = @"extranet";

public JsonResult CreateIdentityUser(RegisterModel model)
{

var userName = string.Format(@"{0}{1}", UserDomain, model.CustomerId);

try

{

if (!Sitecore.Security.Accounts.User.Exists(userName))

{

Membership.CreateUser(userName, model.Password, model.Email);

User user = Sitecore.Security.Accounts.User.FromName(userName, true);

Sitecore.Security.UserProfile userProfile = user.Profile;

userProfile.FullName = string.Format("{0} {1}", model.FirstName, model.LastName);

userProfile.Email = model.Email;

userProfile.Save();

return Json(new { IsSuccess = true, Message = "User Created" }, JsonRequestBehavior.AllowGet);

}

else
{
return Json(new { IsSuccess = true, Message = "User Already Exist" }, JsonRequestBehavior.AllowGet);
}

}

catch (Exception ex)

{

Sitecore.Diagnostics.Log.Error(string.Format("Error in AccountsController.CreateIdentityUser (AddUser): Message: {0}; Source:{1}", ex.Message, ex.Source), this);

return Json(new { IsSuccess = false, Message = "Error while user creation" }, JsonRequestBehavior.AllowGet);

}

For calling this API in your next js application write below code.

Copy to Clipboard

Now the user is created with extranet domain. You can check the user information on sitecore at user manager.

sitecore/shell/Applications/Security/User Manager.aspx

Now it’s time to login user.

Here are the two ways you can login with your sitecore user.

In the scjssconfig.json file, set the remote Sitecore host URL to use SSL, by changing the URL to use the HTTPS protocol
In your application configuration, configure the headers Access-Control-Allow-Headers and Access-Control-Allow-Credentials:

<add name=”Access-Control-Allow-Headers” value=”Content-Type, Accept, X-Requested-With, Session” />

<add name=”Access-Control-Allow-Credentials” value=”true” />

Here is the code for sitecore auth.

Copy to Clipboard

After executing the above code, the user is created with the extranet domain. You can verify the user information in Sitecore at:

sitecore/shell/Applications/Security/User Manager.aspx

Login and Registration of Extranet User: Best Practices

Here are some best practices to ensure a secure and efficient Login and Registration of Extranet User process:

Strong Password Policies: Enforce strong password creation and encourage regular password changes.
Secure Login Protocols: Utilize HTTPS for encrypted communication during login attempts.
2FA Implementation: Implementing 2FA adds an extra layer of security, making it harder for unauthorized access.
User Activity Monitoring: Monitor user activity to detect suspicious behavior and potential security breaches.
Clear User Interface: Design a user-friendly registration and login interface to minimize user errors.

Login and Registration of Extranet User: The Foundation of Secure Collaboration

An efficient Login and Registration of the Extranet User procedure is the foundation of an effective and secure extranet. If you implement these perfect techniques, you’ll be able to build trust, speed up access, and build an environment that is secure for cooperation with your partners from outside.

Additional Resources

To further enhance your understanding and implementation of login and registration for extranet users in Sitecore JSS, check out these additional resources:
Sitecore JSS Documentation
Sitecore Community
Sourceved Sitecore blogs