Home
Documentation
HCL Commerce is a high-availability, highly scalable and customizable e-commerce platform. Able to support hundreds of thousands of transactions per day, HCL Commerce allows you to do business with consumers (B2C) or directly with businesses (B2B). HCL Commerce uses cloud friendly technology to make deployment and operation both easy and efficient. It provides easy-to-use tools for business users to centrally manage a cross-channel strategy. Business users can create and manage precision marketing campaigns, promotions, catalog, and merchandising across all sales channels. Business users can also use AI enabled content management capabilities.
Securing
These topics describe the security features of HCL Commerce and how to configure these features.
Session management
Browsers and e-commerce sites use HTTP to communicate. HTTP is a stateless protocol, which means that each command is run independently without any knowledge of the commands that came before it. Because it is a stateless protocol, sessions must be managed between the browser side and the server side.
Cookie-based session management
With cookie-based session management, a message (cookie) containing user information is sent to the browser by the web server. This cookie is sent back to the server when the user tries to access certain pages. The cookie allows the server to identify the user and retrieve the user session from the session database, so that the user session is maintained. A cookie-based session ends when the user logs off or closes the browser. Cookie-based session management is secure and has performance benefits over alternatives. For this reason, cookie-based session management is recommended for customer sessions.
Enabling cookies for session management
Enable cookies for session management.
Persistent sessions (Remember Me)
HCL Commerce is configured for persistent sessions, meaning that some session-related information of the registered or guest user is stored as permanent cookies. If persistent sessions are enabled, a customer at an HCL Commerce store will be recognized on subsequent visits to the store, even after the customer closes the browser. Sessions can be persisted for both guest and registered users. Persistent sessions are enabled by default, and by default, sessions are persisted for 30 days.
Personalization ID
The Personalization ID identifies a user and allows HCL Commerce to present them with personalized content when the user interacts with the business, throughout the business lifecycle.
Enabling personalization ID
You can enable personalization ID for your HCL Commerce site by editing the HCL Commerce configuration file.

Enabling personalization ID

You can enable personalization ID for your HCL Commerce site by editing the HCL Commerce configuration file.

Before you begin

Ensure that you have completed the following tasks:

Enable persistent sessions for a single store

Procedure

Open the HCL Commerce configuration file.
Search for the PersonalizationId node.
Set the value of the enable attribute to true, as shown in the following sample:
```
<PersonalizationId display="false" enable="true"/>
```
Optional: To ensure a shopper is forgotten after logging off, set the value of the logoffRefresh attribute to true, as shown in the following sample:
```
<PersonalizationId display="false" enable="true" logoffRefresh="true"/>
```
For more information, see Forgetting shoppers after logging off.

What to do next

Package your changes to the HCL Commerce configuration file for deployment.