Salesforce B2C Commerce 24.7 > Administering Your Organization > Managing Sites in Business Manager

Configuring Storefront Sites

New sites require some level of access control. Many use a single shared password for all users. Using a Business Manager login with the functional permission provides a much higher level of security and access control, in particular with frequent password renewals and employees leaving an organization.

For any services requiring access to the protected site, a Business Manager login is also strongly recommended. However, if the password expiration cycle is problematic, the shared password option provides a low-maintenance access control mechanism.

Note: You can use the shared password for some of the users by simply setting the generic password. It doesn't deactivate the protection that is configured via Business Manager user logins.

Select Administration > Sites > Manage Sites.
Use the sort buttons to sort your sites. Sites appear in this order throughout the Business Manager user interface.
Click a site in the Storefront Sites table to manage an individual site.
On the General tab, you can configure the time zone, a customer list, the brand, and billing entity.

See Site Time Zone and Site Brand and Billing Entity.

The ID, default currency, and taxation type are read only.
Click the Settings> tab.

Specify the cartridges and the cartridge path used by your site.

See Registering Your Cartridge.

The HTTP/HTTPS section has been deprecated. The preferred way to configure HTTP/HTTPS hostnames is in the site aliases configuration (SEO/Aliases Configuration). The HTTP/HTTPS hostnames values configured in this section will be used if no hostnames are defined by aliases configuration and are intended only to support the deprecated configuration style.
Click the Cache tab.

See Configure the Static Content Cache.
Click the Site Status tab.

Access to non-production storefronts, for example, not yet live or residing on a different instance type (for example, staging/development) is typically protected by the storefront password protection.

When configuring access, you can provide a single user name/password set for everyone on the team. For a greater level of security, however, you can use Business Manager passwords. The benefit is that if a member leaves the team, their credentials can be deleted instead of having to redistribute a new set of credentials across the team.
1. Select the Site Status: Maintenance, Online (Protected), or Online.
2. When you select Online (Protected), You must select one of the following:
  - Only users with the functional permission 'Access_Protected_Storefront': Only Business Manager users with the required functional permission Access_Protected_Storefront can log into the storefront. The storefront verifies that the credentials match a Business Manager user.
  - Shared Password: You must enter the username and password. This credential set is shared across all team members of the client staff or third party teams who are eligible to access the storefront.