{"id":55345,"date":"2022-08-08T18:29:48","date_gmt":"2022-08-08T12:59:48","guid":{"rendered":"https:\/\/www.tothenew.com\/blog\/?p=55345"},"modified":"2022-08-22T18:50:25","modified_gmt":"2022-08-22T13:20:25","slug":"custom-branding-in-azure-ad","status":"publish","type":"post","link":"https:\/\/www.tothenew.com\/blog\/custom-branding-in-azure-ad\/","title":{"rendered":"Custom Branding in Azure AD"},"content":{"rendered":"<p><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-55336\" src=\"\/blog\/wp-ttn-blog\/uploads\/2022\/07\/Custom-Branding-in-Azure-AD-Blog-TTN-v1.png\" alt=\"\" width=\"624\" height=\"257\" data-wp-editing=\"1\" srcset=\"\/blog\/wp-ttn-blog\/uploads\/2022\/07\/Custom-Branding-in-Azure-AD-Blog-TTN-v1.png 624w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/Custom-Branding-in-Azure-AD-Blog-TTN-v1-300x124.png 300w\" sizes=\"(max-width: 624px) 100vw, 624px\" \/><\/p>\n<h2><b>Introduction<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Customizing your Azure AD sign-in pages, visible when users sign in to your organization&#8217;s tenant-specific apps, such as <\/span><span style=\"font-weight: 400;\">https:\/\/outlook.com\/tothenew.com<\/span><span style=\"font-weight: 400;\">,\u00a0 <\/span><a href=\"https:\/\/passwordreset.microsoftonline.com\/?whr=tothenew.com\"><span style=\"font-weight: 400;\">https:\/\/passwordreset.microsoftonline.com\/?whr=tothenew.com<\/span><\/a><span style=\"font-weight: 400;\"> (where tothenew.com should be replaced by the domain used by your tenant\/organization) has now become more feasible using the Azure AD Custom Branding option. We will configure the same and see how it works.<\/span><\/p>\n<h2><b>Scenario<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Logos, images, taglines and phrases, and other information presented to users help ensure consistency and reduce confusion by clearly indicating that \u2018this is a legitimate service\/notification from my company.\u2019 Thus, Azure AD provides a feature known as Custom Branding to incorporate branding aspects into your application.<\/span><\/p>\n<h2><b>Solution Approach<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Azure AD provides limited but great options to customize the branding for an organization. The identity and user platform allow us to configure user experience based on organization standards and policies.<\/span><\/p>\n<h2><b>Prerequisites<\/b><\/h2>\n<ul>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Access to Azure Account having Azure AD 365\/Premium 1\/Premium 2 license.<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Global Admin Access to set up the Custom Branding Page.<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Custom Branding Page Details and Logos.<\/span><\/li>\n<\/ul>\n<h2><b>Solution<\/b><\/h2>\n<p><span style=\"text-decoration: underline;\"><b>Creating an Enterprise Application:<\/b><\/span><\/p>\n<p><span style=\"font-weight: 400;\">To integrate with <\/span><b>Azure Active Directory,<\/b><span style=\"font-weight: 400;\"> you will need an App Registration or Enterprise Application created in Azure. For options like single sign-on and custom policies, we are using Enterprise Application. You can also use App Registration as per your application preferences.<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Step 1: Go to Enterprise Application<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Step 2: Choose from the options for our application, here we are developing our application.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Step 3: For our application to support the authentication, we need to add the <\/span><b>Client Secret<\/b><span style=\"font-weight: 400;\"> and <\/span><b>Application ID<\/b><span style=\"font-weight: 400;\"> to the code.<\/span><\/p>\n<p><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-55337\" src=\"\/blog\/wp-ttn-blog\/uploads\/2022\/07\/11-1-1024x501.png\" alt=\"\" width=\"664\" height=\"325\" srcset=\"\/blog\/wp-ttn-blog\/uploads\/2022\/07\/11-1-1024x501.png 1024w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/11-1-300x147.png 300w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/11-1-768x376.png 768w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/11-1-624x305.png 624w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/11-1.png 1311w\" sizes=\"(max-width: 664px) 100vw, 664px\" \/><\/p>\n<p><span style=\"font-weight: 400;\">Step 4: Once we have hosted our application, we can add a redirect URI of the application to which the users will redirect for sign-in.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">We can choose from multi-tenant or single-tenant access for the application.<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Here we are selecting the single-tenant option as we wish our application to be used only by our tenant users.<\/span><\/p>\n<p><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-55344\" src=\"\/blog\/wp-ttn-blog\/uploads\/2022\/07\/2-1-1024x503.png\" alt=\"\" width=\"663\" height=\"326\" srcset=\"\/blog\/wp-ttn-blog\/uploads\/2022\/07\/2-1-1024x503.png 1024w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/2-1-300x147.png 300w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/2-1-768x377.png 768w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/2-1-624x306.png 624w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/2-1.png 1304w\" sizes=\"(max-width: 663px) 100vw, 663px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-55343\" src=\"\/blog\/wp-ttn-blog\/uploads\/2022\/07\/3-1024x495.png\" alt=\"\" width=\"664\" height=\"321\" srcset=\"\/blog\/wp-ttn-blog\/uploads\/2022\/07\/3-1024x495.png 1024w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/3-300x145.png 300w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/3-768x371.png 768w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/3-624x302.png 624w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/3.png 1317w\" sizes=\"(max-width: 664px) 100vw, 664px\" \/><\/p>\n<p><span style=\"font-weight: 400;\">Once this is done, users can authenticate to our application. Now let&#8217;s configure the branding options for our application.<\/span><\/p>\n<h5><strong><span style=\"text-decoration: underline;\">Customize Branding:<\/span><\/strong><\/h5>\n<p><span style=\"font-weight: 400;\">Let&#8217;s configure the branding options for our application.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Before moving ahead, confirm that the images (logo, background, square background) you wish to display on the sign-in page are the correct sizes and dimensions. If you don\u2019t take care of this, you will waste your time uploading images, and then ultimately you may find that branding changes are not done. Here are certain specifications \u2212<\/span><\/p>\n<p><img decoding=\"async\" loading=\"lazy\" class=\"alignnone wp-image-55402 size-large\" src=\"\/blog\/wp-ttn-blog\/uploads\/2022\/07\/Screenshot-2022-08-22-184304-1024x484.png\" alt=\"\" width=\"625\" height=\"295\" srcset=\"\/blog\/wp-ttn-blog\/uploads\/2022\/07\/Screenshot-2022-08-22-184304-1024x484.png 1024w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/Screenshot-2022-08-22-184304-300x142.png 300w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/Screenshot-2022-08-22-184304-768x363.png 768w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/Screenshot-2022-08-22-184304-624x295.png 624w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/Screenshot-2022-08-22-184304.png 1171w\" sizes=\"(max-width: 625px) 100vw, 625px\" \/><\/p>\n<h4><b>Steps:<\/b><\/h4>\n<p><span style=\"font-weight: 400;\">Step 1 \u2212 Go to the directory you want to work with.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Step 2 \u2212 Click on the \u2018Configure\u2019 tab from the top menu.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Step 3 \u2212 Click the \u2018Customize Branding\u2019 button. The following pop-up will appear.<\/span><\/p>\n<p><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-55342\" src=\"\/blog\/wp-ttn-blog\/uploads\/2022\/07\/4-1024x498.png\" alt=\"\" width=\"665\" height=\"323\" srcset=\"\/blog\/wp-ttn-blog\/uploads\/2022\/07\/4-1024x498.png 1024w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/4-300x146.png 300w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/4-768x373.png 768w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/4-624x303.png 624w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/4.png 1310w\" sizes=\"(max-width: 665px) 100vw, 665px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-55340\" src=\"\/blog\/wp-ttn-blog\/uploads\/2022\/07\/5-1-1024x495.png\" alt=\"\" width=\"664\" height=\"321\" srcset=\"\/blog\/wp-ttn-blog\/uploads\/2022\/07\/5-1-1024x495.png 1024w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/5-1-300x145.png 300w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/5-1-768x371.png 768w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/5-1-624x302.png 624w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/5-1.png 1317w\" sizes=\"(max-width: 664px) 100vw, 664px\" \/><\/p>\n<p><span style=\"font-weight: 400;\">Step 4 \u2212 Enter the details and upload the images.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Step 5 \u2212 Click Next and enter the other details.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">After you are done, look for the notifications at the bottom of the window to ensure that changes are accepted. A notification in the red outline shows that it wasn\u2019t successful in a previous attempt and threw an error. If the changes are not accepted and an error occurs, click the \u2018Details\u2019 button to find the cause. Usually, this occurs when the size and dimension of images to be uploaded are not correct.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Custom Links to test the branding:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\"><a href=\"https:\/\/account.activedirectory.windowsazure.com\/proofup.aspx?whr=contoso.com\"><span style=\"font-weight: 400;\">https:\/\/account.activedirectory.windowsazure.com\/proofup.aspx?whr=<\/span><\/a><span style=\"font-weight: 400;\">&lt;domain on which your application is hosted&gt;<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">login.microsoftonline.com\/?whr=&lt;domain on which your application is hosted&gt;<\/span><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">example:\u00a0<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\"><a href=\"https:\/\/account.activedirectory.windowsazure.com\/proofup.aspx?whr=contoso.com\"><span style=\"font-weight: 400;\">https:\/\/account.activedirectory.windowsazure.com\/proofup.aspx?whr=<\/span><\/a><span style=\"font-weight: 400;\">ToTheNew.com<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">login.microsoftonline.com\/?whr=ToTheNew.com<\/span><\/li>\n<\/ol>\n<h4><b>Login with Customized Sign-in Page<\/b><\/h4>\n<p><span style=\"font-weight: 400;\">When you sign in to your organization\u2019s application, you will see your logo, big illustration image, and sign-in text on that page. For example, let\u2019s sign in to Office 365 using the organization&#8217;s account.<\/span><\/p>\n<p><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-55341\" src=\"\/blog\/wp-ttn-blog\/uploads\/2022\/07\/6-1-1024x497.png\" alt=\"\" width=\"677\" height=\"328\" srcset=\"\/blog\/wp-ttn-blog\/uploads\/2022\/07\/6-1-1024x497.png 1024w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/6-1-300x146.png 300w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/6-1-768x373.png 768w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/6-1-624x303.png 624w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/6-1.png 1310w\" sizes=\"(max-width: 677px) 100vw, 677px\" \/><\/p>\n<p><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-55339\" src=\"\/blog\/wp-ttn-blog\/uploads\/2022\/07\/7-1-1024x489.png\" alt=\"\" width=\"671\" height=\"320\" srcset=\"\/blog\/wp-ttn-blog\/uploads\/2022\/07\/7-1-1024x489.png 1024w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/7-1-300x143.png 300w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/7-1-768x367.png 768w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/7-1-624x298.png 624w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/7-1.png 1308w\" sizes=\"(max-width: 671px) 100vw, 671px\" \/><\/p>\n<p><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-55338\" src=\"\/blog\/wp-ttn-blog\/uploads\/2022\/07\/8-1.png\" alt=\"\" width=\"675\" height=\"460\" srcset=\"\/blog\/wp-ttn-blog\/uploads\/2022\/07\/8-1.png 784w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/8-1-300x204.png 300w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/8-1-768x523.png 768w, \/blog\/wp-ttn-blog\/uploads\/2022\/07\/8-1-624x425.png 624w\" sizes=\"(max-width: 675px) 100vw, 675px\" \/><\/p>\n<h3><b>Things to Consider<\/b><\/h3>\n<ul>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">The domain name should be active.<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">It might take up to an hour for changes to appear on the sign-in page.<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">To test, choose an \u2018in-private\u2019 session of internet explorer (or a corresponding session in another browser where cookies don\u2019t affect your browsing).<\/span><\/li>\n<\/ul>\n<h3><b>Conclusion<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">This capability helps employees know that they are interacting with specific company resources when performing security actions such as signing in, accessing applications, and changing their passwords. An organization can add the company logo and color schemes to the Sign-in and Access Panel pages, as well as localized versions of the logo for different languages and locales.<\/span><\/p>\n<h3><b>References and Links<\/b><\/h3>\n<ul>\n<li style=\"font-weight: 400;\"><a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory\/fundamentals\/customize-branding\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory\/fundamentals\/customize-branding<\/span><\/a><\/li>\n<li style=\"font-weight: 400;\"><a href=\"https:\/\/www.esecurityplanet.com\/products\/single-sign-on-solutions\/\"><span style=\"font-weight: 400;\">https:\/\/www.esecurityplanet.com\/products\/single-sign-on-solutions\/<\/span><\/a><\/li>\n<li style=\"font-weight: 400;\"><a href=\"https:\/\/techcommunity.microsoft.com\/t5\/core-infrastructure-and-security\/the-adventure-continues-custom-branding-in-azure-ad-and-other\/ba-p\/763690\"><span style=\"font-weight: 400;\">https:\/\/techcommunity.microsoft.com\/t5\/core-infrastructure-and-security\/the-adventure-continues-custom-branding-in-azure-ad-and-other\/ba-p\/763690<\/span><\/a><\/li>\n<li style=\"font-weight: 400;\"><a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory\/authentication\/concept-mfa-howitworks\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory\/authentication\/concept-mfa-howitworks<\/span><\/a><\/li>\n<li style=\"font-weight: 400;\"><a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory\/authentication\/concept-authentication-phone-options\"><span style=\"font-weight: 400;\">https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory\/authentication\/concept-authentication-phone-options<\/span><\/a><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<div class=\"ap-custom-wrapper\"><\/div><!--ap-custom-wrapper-->","protected":false},"excerpt":{"rendered":"<p>Introduction Customizing your Azure AD sign-in pages, visible when users sign in to your organization&#8217;s tenant-specific apps, such as https:\/\/outlook.com\/tothenew.com,\u00a0 https:\/\/passwordreset.microsoftonline.com\/?whr=tothenew.com (where tothenew.com should be replaced by the domain used by your tenant\/organization) has now become more feasible using the Azure AD Custom Branding option. We will configure the same and see how it works. [&hellip;]<\/p>\n","protected":false},"author":1480,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":104},"categories":[4308,2348,1,3109],"tags":[5004],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/posts\/55345"}],"collection":[{"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/users\/1480"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/comments?post=55345"}],"version-history":[{"count":3,"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/posts\/55345\/revisions"}],"predecessor-version":[{"id":55403,"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/posts\/55345\/revisions\/55403"}],"wp:attachment":[{"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/media?parent=55345"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/categories?post=55345"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tothenew.com\/blog\/wp-json\/wp\/v2\/tags?post=55345"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}