Liferay DXP Application Security Features Overview

This guide details the application-level security features of Liferay Digital Experience Platform (DXP), emphasizing its design focused on security, compliance, and data protection. It outlines how Liferay DXP enables enterprises to manage users and site access while adhering to changing compliance standards. The document describes various security measures, including transport security with HTTPS, encryption techniques for user passwords and data at rest, and compliance with regulations such as GDPR and CCPA. Additionally, it explains the multi-layered security architecture, which includes IP permission layers, authentication verification, and service access policies. The guide also covers features like multi-factor authentication, federated identity management, and role-based access control, ensuring a comprehensive approach to user authentication and data privacy. Liferay DXP's certifications, including ISO/IEC 27001:2013, further reinforce its commitment to security management practices.