Blog Post

Microsoft Entra Blog
2 MIN READ

Introducing enhanced company branding for sign-in experiences in Azure AD

Robin Goldstein's avatar
Robin Goldstein
Icon for Microsoft rankMicrosoft
Dec 12, 2022

Hello friends,  

 

I'm thrilled to announce that we have redesigned the company branding functionality to allow more flexible and user-centric customization of the built-in identity flows for Azure AD and Microsoft 365 apps. The new experience controls apply to sign-in for users in the directory and for external users, including use cases for B2B, B2E and first-party applications running on Azure AD. You can try the public preview today. 

 

Your users, your experience 

We added these customization options based on your feedback that you wanted more control over the experience for your users. For those building customer facing apps, we know from our experience on the B2C platform that a beautifully branded experience is critical in building a trusted relationship.  

 

With enhanced Company Branding, you’ll be able to create a custom look and feel for the default sign in pages, as well as pages targeting specific browser languages. In addition, you can now customize self-service password reset (SSPR), footer hyperlinks, and browser icon, style sign-in experiences using cascading style sheets (CSS) and enable header and footer using one of the pre-defined templates. 

  

Configure the sign in experience 

Enhanced customization can be configured using the company branding blade in the Azure portal for your tenant. There, you can configure settings that automatically display customizations to your users when they land on your organization’s sign in pages, as well as pages targeting specific browser languages.  

 

The following are all new settings available on the company branding blades. 

   

  • Configure layout – This allows you to specify the placement of web page elements on the sign-in page. 

 

 

 

  • Set up custom self-service password reset hyperlink – This provides the ability to show, hide, or customize the self-service password reset link on the sign-in page. 

 

 

 

  • Customize footer hyperlinks - the URLs and link text for privacy and terms of use hyperlinks that appear in the footer of the sign-in page:   

 

 

 

  • Set up ‘Favicon’ - the icon that displays in the web browser tab:

 

 

  • Customize header - a custom logo to display in the header of the sign-in page: 

 

Once your settings are uploaded, you can view the resulting end user experience. 

 

 

Get started using company branding by setting up Azure AD Premium or Office 365.  

 

Learn more about company branding. 

 

As always, we love hearing from you, so please share your feedback on these updates through the links below. 

 
Robin Goldstein  

Director of Product Management, Microsoft identity 

LinkedIn: Robin Goldstein | LinkedIn 

 

 

Learn more about Microsoft identity: 

 

Updated Feb 02, 2023
Version 2.0
Product Announcements
  • TANIMURA_Noboru's avatar
    TANIMURA_Noboru
    Brass Contributor
    Feb 03, 2023

    I find it very disappointing that "Hyperlinks that are added to the sign-in page text render as text in native environments, such as desktop and mobile applications."

     

    It's not smart that the sign-in form displays the organization's contacts by URL.

    Quickly implement it so that desktop and mobile applications can also display it as a hyperlink.

  • Rmartinez1427's avatar
    Rmartinez1427
    Brass Contributor
    Dec 13, 2022

    This is awesome. It would be great to have a "Preview" option before submitting the changes.

  • TedLarsen's avatar
    TedLarsen
    Brass Contributor
    Dec 13, 2022

    Fantastic! Now please add AD group based customization for different branding per group of users. We have multiple departments thst act as separate entities and we’d like to customize per group!

     

    Thank you!

  • RobertCrane's avatar
    RobertCrane
    MVP
    Dec 12, 2022

    Can you help me understand why you need Azure AD P1 to brand a tenant? one would suggest that it should be available to all as a way to enhance security rather than being restricted to requiring Azure AD P1 or P2.

  • LazyAdmin_nl's avatar
    LazyAdmin_nl
    Copper Contributor
    Dec 13, 2022

    What seems to work (as a workaround for now for tenants with existing branding), is open the Company branding page, then click on for example User Settings in the left toolbar, and then hit the back button in your browser. This way you are able to bypass the Azure AD P1 license requirement page.

  • TANIMURA_Noboru's avatar
    TANIMURA_Noboru
    Brass Contributor
    Mar 12, 2023

    Hi SashaMars ,

     

    Thanks for picking up on my comment.

     

    What is the link that an organization wants to show to end users, even if it interrupts the authentication flow?
    It is a lead to a solution in case of authentication problems.

     

    End-users want to be able to access the organization's service desk contact information, documentation, and FAQs to resolve issues in the device's default browser.

    As evidence, you have placed "No account? Create one!", "Can't access your account?", and "Forgot my password" links in the default sign-in UI.

     

    Failure or unpredictable behavior is not a problem!
    Because the end user accessing the link has not been able to authenticate before then.

    End users who can authenticate would not open such a link.

  • TedLarsen's avatar
    TedLarsen
    Brass Contributor
    May 17, 2023

    Hello SashaMars Is it possible to get any kind of update as to the company branding by user group roadmap?    Has the request moved at all up the priority chain?  Is it still being considered for implentation anytime soon?

    This issue is the only reason we are unable to use this feature set.   Thank you for your feedback. 

  • RobertCrane's avatar
    RobertCrane
    MVP
    Dec 13, 2022

    Try and access branding in a tenant without Azure AD P1 or P2. It no longer works. I have tenants like this and I can no longer make changes. Something has changed since November.

  • SashaMars's avatar
    SashaMars
    Icon for Microsoft rankMicrosoft
    Dec 13, 2022

    TedLarsen, thank you for taking a minute and sharing your perspective. The good news is that branding per group of users is in our roadmap. We would like to learn more about your use cases to understand how sign-in experiences need to look different for group 1 vs group 2. 

    Would you prefer to set company branding up using Azure portal or MS Graph API?