<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <title>Custom Authentication</title>
  <link rel="self" href="https://liferay.dev/c/message_boards/find_thread?p_l_id=119785294&amp;threadId=111981330" />
  <subtitle>Custom Authentication</subtitle>
  <id>https://liferay.dev/c/message_boards/find_thread?p_l_id=119785294&amp;threadId=111981330</id>
  <updated>2026-04-06T22:39:45Z</updated>
  <dc:date>2026-04-06T22:39:45Z</dc:date>
  <entry>
    <title>RE: Custom Authentication</title>
    <link rel="alternate" href="https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=111989227" />
    <author>
      <name>David H Nebinger</name>
    </author>
    <id>https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=111989227</id>
    <updated>2019-01-11T14:35:45Z</updated>
    <published>2019-01-11T14:35:45Z</published>
    <summary type="html">&lt;p&gt;&amp;quot;I want to log them in externally and it should not affect the
  normal Liferay process, but I also want the normal Liferay process&amp;quot;?&lt;/p&gt;
&lt;p&gt;Liferay has support via the authentication pipeline to support
  creating an external login. Normally we use this path to integrate
  with external authentication mechanisms.  You don't need a separate
  login portlet using the pipeline because all roads get the user into
  Liferay. Since all users must be real Liferay users anyway, this
  authentication pipeline allows for easy integration w/ the external systems.&lt;/p&gt;
&lt;p&gt;Now if you are asking to use the external auth mechanism but not have
  the folks be Liferay users, well that is just not possible.  All
  authenticated users &lt;strong&gt;must&lt;/strong&gt; be Liferay users.&lt;/p&gt;</summary>
    <dc:creator>David H Nebinger</dc:creator>
    <dc:date>2019-01-11T14:35:45Z</dc:date>
  </entry>
  <entry>
    <title>Custom Authentication</title>
    <link rel="alternate" href="https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=111981329" />
    <author>
      <name>Hamidul Islam</name>
    </author>
    <id>https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=111981329</id>
    <updated>2019-01-11T00:48:04Z</updated>
    <published>2019-01-11T00:48:04Z</published>
    <summary type="html">&lt;p&gt;Hi All,&lt;/p&gt;
&lt;p&gt;For my current project I need to validate user in the external system
  with a custom login portlet. The external system validate the user
  using rest API call. Once the user is validated it returns
  authentication(some string) token and the user should be able to login
  Liferay without using liferay`s deafult authentication.&lt;/p&gt;
&lt;p&gt; &lt;/p&gt;
&lt;p&gt;I want to handle this situation in such way that it should not
  distrub liferay`s default sign in portlet authentication flow. Because
  in my same Portal I have different applications which are using
  default sign in portlet.&lt;/p&gt;
&lt;p&gt; &lt;/p&gt;
&lt;p&gt;
  &lt;strong&gt;My Environment :&lt;/strong&gt; Liferay 7 DXP, Tomcat&lt;/p&gt;
&lt;p&gt; &lt;/p&gt;
&lt;p&gt;Thanks&lt;/p&gt;
&lt;p&gt;Hamidul Islam&lt;/p&gt;</summary>
    <dc:creator>Hamidul Islam</dc:creator>
    <dc:date>2019-01-11T00:48:04Z</dc:date>
  </entry>
</feed>
