A critical vulnerability was discovered in React Server Components (Next.js). Our systems remain protected but we advise to update packages to newest version. Learn More.
AspNetUsers table are not part of EPiServer scheme. The synched roles are stored in tblSynchedUserRole, synched users are stored in tblSynchedUser and the relations between them are stored in tblSynchedUserRelations.
Yes! Thank you, the synchronisation is indeed working. The problem was using the role "CmsAdmins" as specified in the documentation. To get that to work I also needed to make changes to web.config to give CmsAdmins correct access.
My goal is to use both local SQL users and AD users to log in to Episerver's edit/admin mode. But my problem starts already with trying to get login using ADFS to work.
I've installed a fresh Alloy site, and just changed Startup.cs as described here: http://world.episerver.com/documentation/developer-guides/CMS/security/federated-security/
Everything works as expected until the identity should be synchronized to Episerver. I get a 401.2 error when accessing edit mode, wich according to the documentation indicates that the identity provider does not send the required role claims.
No error is thrown, nothing is logged in EPiServerErrors.log. The user doesn't get synchronized (at least nothing is updated in the AspNetUsers table).
When debugging I can take a look at the Identity returned from ADFS. To me the values looks ok, but I'm not sure if the Role claim is sent in the right format. What will it look like if the user belongs to multiple roles?
Don't know what to do next. Please help, otherwise I will start developing in SiteCore :-) (I know I shouldn't be making jokes like that)