Skip to main content

Customize Your Account Appearance

Entrust Instant ID as a service lets you tailor the authentication experience to match your organization's brand, language, and workflow requirements. You can control visual appearance, login page text, layout structure, legal notices, and sign-in behavior across your tenant.

Brand your login pages​

Use custom branding on login pages to match your organization's standards. This is required for white-label deployments where IIDaaS branding cannot be shown.

Instant ID as a service lets you replace the default logo, favicon, colors, font, and browser tab title. These changes apply to all entry pages, including login, password reset, registration, and logout.

Before you begin​

Before you begin the customizations, you need the following:

  • A Site Administrator role with permission to modify customization settings.
  • A logo file ready (PNG or JPG format, up to 900 × 300 pixels).
  • A favicon file ready (PNG or ICO format, 32 × 32 or 64 × 64 pixels recommended, 32 KB maximum).
  • Your brand color hex values (primary, accent, and link colors).

Upload your logo and favicon​

Upload your organization's logo to replace the default Entrust logo on login pages.

  1. Click Customization > Theme. The Theme page appears.
  2. Select the Custom Theme tab.
  3. Expand the Brand and Logo section.
  4. Under Company Logo, click Upload and select your logo file.
  5. Configure logo placement:
    1. Set Logo in Login Card to Show to display the logo inside the login card, or Hide to remove it from the card.
    2. Set Logo Card Layout to Top or Left to control where the logo appears relative to the login form.
    3. Set Logo Alignment to Center or Left.
  6. Optional: To display the logo in the page header, set Logo in Header to Show and choose the Header Logo Scope (All Pages or Entry Pages Only).
  7. Under Favicon, click Upload and select your favicon file.

Note: Logo files must be in PNG or JPG format up to 900 × 300 pixels. Favicons must be in PNG or ICO format, 32 × 32 or 64 × 64 pixels, and no larger than 32 KB.

Set your brand colors​

Define the colors that appear on login and authentication pages to match your corporate brand guidelines.

  1. In the Custom Theme tab, expand the Colors and Surfaces section.
  2. Set the Primary Color by clicking the color picker or entering a hex value. This color appears on primary buttons and key UI elements.
  3. Set the Accent Color for secondary interactive elements.
  4. Set the Link Color for hyperlinks on entry pages.
  5. Choose a Background Style:
    • Solid Color — Select a single background color.
    • Gradient — Set a Start Color, End Color, and Gradient Angle (0°, 45°, 90°, or 135°).

Choose a font family​

Select a font that matches your organization's web presence.

  1. In the Custom Theme tab, expand the Typography section.
  2. Select a Font Family from the available options:
    • Roboto
    • Arial
    • Helvetica Neue
    • Georgia
    • Verdana
    • System UI

Info: The selected font applies to entry pages only (login, password reset, registration, and logout). It does not change the font in the administration portal.

Set the browser tab title​

Replace the default browser tab title with your organization's name or brand. The browser tab title is one of the customizable strings managed on the Custom Messages tab.

  1. Go to the Custom Messages tab.
  2. Select the target language from the locale drop-down.
  3. Find the Browser Tab Title string (under the "Welcome / Branding" category, key common.browserTitle).
  4. Enter your custom title in the Custom Override column.
  5. Click Save.

You can use the {} placeholder to dynamically insert the company name.

For more details on working with custom messages, see Customize text and messages.

Preview and save​

The Custom Theme tab includes a live preview panel that shows how your changes render on login screens before you save them.

  1. Review the preview panel on the right side of the page. It displays the login page, challenge page, password reset page, and user password page with your current settings applied.
  2. When you are satisfied with the preview, click Save.

Reset to defaults​

If you need to revert your branding changes, you can reset the theme to Entrust defaults.

  1. In the Custom Theme tab, click Reset Theme.
  2. Confirm the reset.

This clears your custom colors and logo and reverts all brand settings to their defaults.

Customize the login page layout​

Layout controls let you tailor the visual structure of the login experience, including card style, announcement placement, and sign-in flow order, without changing your brand assets. Use these settings to match your design system, highlight important notices, and streamline the authentication flow for your users.

Before you begin​

Before you begin, you need the following:

  • A Site Administrator role with permission to modify customization settings.
  • Your brand assets. SeeBrand your login pages.

Configure the login card appearance​

Control the visual style of the login card that contains the sign-in form.

  1. Click Customization > Theme. The Theme page appears.
  2. Select the Custom Theme tab.
  3. Expand the Login Layout and Flow section.
  4. Configure the card style:
    1. Card Top Border—Set to Show to display a colored accent border at the top of the card, or Hide to remove it.
    2. Card Corner Style—Choose Default, Rounded, or Soft to control how rounded the card corners appear.
  5. Configure the card heading:
    1. Card Heading Visible—Set to Show to display a heading inside the login card.
    2. Card Heading Alignment—Choose Center or Left.

Tip: When you enable the card heading, you can customize the heading text on the Custom Messages tab using the "Card Heading" and "Card Subheading" strings.

Position the message of the day​

The message of the day (MOTD) displays announcements such as maintenance windows, policy changes, or welcome messages on login pages. Choose a position that fits your communication needs.

  1. In the Login Layout and Flow section, set the MOTD Position:
    • Right—Displays the message in a panel beside the login card. Best for persistent announcements that users can read while signing in.
    • Above—Displays the message above the login card. Best for urgent notices that users must see before they interact with the form.
    • Below—Displays the message below the login card. Best for supplemental information.
    • Hidden—Removes the MOTD from the login page entirely.
  2. Set the MOTD Corner Style to Default, Rounded, or Soft to match your card style.
  3. Optional: Set the MOTD Background Color to make the announcement panel stand out.

Control the login flow order​

Determine which authentication method users see first when they reach the login page.

  1. In the Login Layout and Flow section, set the Login Flow Order:
    • Credentials First—Users see the username (and optionally password) prompt first. Choose this when most users authenticate with passwords or when your organization is transitioning to passwordless.
    • Passwordless First—Users see passkey and FIDO options first. Choose this when most users have registered passkeys or hardware tokens and you want to encourage passwordless adoption.

Simplify options with collapsed secondary login​

When your login page offers multiple authentication methods, you can collapse less-common options behind a toggle to reduce visual clutter.

  1. In the Login Layout and Flow section, set Secondary Login Display:
    • Visible—All login options appear on the page at once.
    • Collapsed—Secondary options are hidden behind an expandable toggle. Users who need them can expand the section.

Tip: Use Collapsed when your organization supports both passwordless and traditional login, but one method is used by the majority. This keeps the page clean while still offering alternatives.

Show or hide the language selector​

Control whether users can switch languages on the login page.

  1. In the Login Layout and Flow section, set Language Selector Visible:
    • Show—Users can change the login page language.
    • Hide—The language selector does not appear. Use this for single-language organizations.

If you need to restrict which languages are available rather than hiding the selector entirely, see Configure multilingual s.

Preview and save​

  1. Review the live preview panel to confirm your layout changes.
  2. Click Save.

Reset layout to defaults​

If you need to revert layout changes:

  1. In the Custom Theme tab, click Reset Login Layout.
  2. Confirm the reset.

This clears all layout, footer, flow, font, and language-selector settings and reverts them to platform defaults.

Customize login page text and messages​

Instant ID as a service displays default text on login, registration, password-reset, and error pages. Instant ID as a service already provides translations for all supported locales, so the default text works out of the box in every language. However, you can override any string with your own wording. For example, you can override the string to use organization-specific terminology ("Employee ID" instead of "User ID"), add your helpdesk contact information to error messages, or meet regulatory requirements for specific wording.

Instant ID as a service supports overriding 79 user-facing strings, and each override can be set independently per locale so your custom wording carries through to every language your organization uses.

When to customize messages​

Use custom messages when you need to address one or more of the following scenarios.

ScenarioExample
Terminology alignmentReplace User ID with Employee ID or Badge Number to match your internal vocabulary.
Branded error guidanceReplace generic error messages with actionable instructions like Contact the IT helpdesk at ext. 4567.
Regulatory wordingModify authentication prompts to include required disclosures or consent language.
Multilingual custom wordingApply your organization-specific overrides in each locale. Instant ID as a service already provides translations for all default strings, so this is only needed when you want your custom wording to appear in multiple languages.

Edit individual messages​

Override a single string for a specific language.

  1. Click Customization > Theme. The Theme page appears.
  2. Select the Custom Messages tab.
  3. Select the target language from the locale drop-down list.
  4. Find the string you want to customize:
    1. Use the search field to filter by label, default text, or custom text.
    2. Optional: Set the filter to Customized Only to view strings you have already overridden.
  5. Enter your custom text in the Custom Override column for the target string.
  6. Click Save.

Warning: Some strings contain placeholder tokens such as {} that insert dynamic values (for example, company name or retry counts). If your custom text removes a placeholder, a warning appears. You can omit the placeholder if you prefer to hard-code the value instead.

Bulk edit with import and export​

Use the import and export workflow for large-scale changes, such as translating all strings for a new locale or applying terminology changes across many messages.

Export current strings​

  1. On the Custom Messages tab, select the locale you want to export.
  2. Click Export.
  3. Save the downloaded JSON file. It contains all string keys with their default and custom values for that locale.

Edit the exported file​

Open the JSON file in a text editor or hand it off to a translation team. Edit the custom values as needed. Keep the JSON structure and key names unchanged.

Import updated strings​

  1. On the Custom Messages tab, click Import.
  2. Select the modified JSON file.
  3. Review the diff that shows current values compared to imported values.
  4. Click Apply Changes.
  5. Click Save.

Filter and audit customizations​

The Custom Messages tab provides tools to track what you have customized.

  • Filter mode—Switch between All Strings and Customized Only to focus on overridden values.
  • Customization count badge—Each locale in the language drop-down shows a count of how many strings are currently overridden.
  • Search—Search across label, default text, and custom text simultaneously to find specific strings.

Reset messages​

You can reset custom messages in two ways.

Reset all messages for a locale​

  1. On the Custom Messages tab, select the target locale.
  2. Click Reset All for that locale.
  3. Confirm the reset.

This clears all custom overrides for that language and reverts every string to the platform default.

Reset an individual string​

  1. Find the customized string using search or the Customized Only filter.
  2. Click the reset icon next to the string.
  3. Click Save.

Optional tooltip strings​

Some custom message strings are optional tooltips that do not appear on the login page by default. These tooltips only display when you provide a custom value, giving you a way to add contextual help without changing the existing layout.

StringKeyEffect
User ID Tooltipcommon.loginAuth.enterUserIdTooltipDisplays a tooltip on the user ID entry field to guide users (for example, Enter your Employee ID).

To add a tooltip, enter a custom value for the string on the Custom Messages tab. To remove a tooltip, reset the string to its default (empty) value.

Restrictions​

Note:

  • Each custom string has a maximum length of 500 characters.
  • Some default strings contain placeholder tokens ({}) that insert dynamic values such as the company name. If you remove a placeholder, a warning appears. You can safely omit the placeholder if you prefer to hard-code the value in your custom text.
  • HTML tags in custom text are escaped and displayed as plain text. You cannot use HTML to format custom messages.

Best practices​

  • Keep overrides short and clear. Users scan login pages quickly. Concise text performs better than lengthy instructions.
  • Test overrides using the live preview on the Custom Theme tab before saving.
  • When customizing error messages, include actionable guidance (for example, who to contact and how) rather than only restating the error.

Configure multilingual login pages​

When the login page language selector offers all available locales but your organization only operates in a subset of those languages, users may select a locale that is not relevant to your deployment. Restricting the language selector to only the locales your organization uses keeps the experience clean and focused.

Instant ID as a service already provides translations for all default strings in every supported locale. Language restriction is about limiting which locales appear in the selector, not about providing missing translations.

Before you begin​

  • You have a Site Administrator role with permission to modify customization settings.
  • You know which locales your organization operates in.
  • Optional: If you have customized login messages, you have prepared overrides for each enabled locale. See
  • Customize login page text and messages.

Restrict available languages​

Limit the language selector on entry pages to only your supported locales.

  1. Go to Customization > Theme.
  2. Select the Custom Theme tab.
  3. Expand the Login Layout and Flow section.
  4. Set Restrict Language Selectors to Enable.
  5. In the language list that appears, select the checkboxes for each locale your organization supports.
  6. Click Save.

Only the selected languages appear in user-facing language selectors on login, password reset, registration, and logout pages.

Understand fallback behavior​

When language restriction is enabled and a user's browser or authentication context requests a locale that is not in the enabled set, Instant ID as a service falls back to the account's default locale. This ensures users always see a fully translated page rather than a partially translated or untranslated one.

Provide custom messages per language​

Instant ID as a service already provides translations for all default strings, so the login pages work correctly in every enabled locale without any overrides. If you have customized login messages (for example, organization-specific terminology or helpdesk contact information), ensure those overrides are applied in each enabled locale so your custom wording is consistent across languages.

  1. Go to the Custom Messages tab.
  2. Select the first enabled locale from the language drop-down.
  3. Export the strings as JSON, apply your custom wording, and import the updated file. See Bulk edit with import and export for detailed steps.
  4. Repeat for each enabled locale.

Tip: Use the customization count badge on each locale in the drop-down to confirm that all locales have a consistent number of overrides. A locale with fewer customizations than others may indicate that your custom wording has not been applied there yet.

Supported locales​

For the full list of locales that Instant ID as a service supports for custom messages and languages restrictions, see Supported languages

Verify the experience​

Confirm that the language restriction works correctly.

  1. Open a private browser window.
  2. Navigate to your tenant login page.
  3. Confirm that the language selector only shows your enabled locales.
  4. Change your browser language to a locale that is not in the enabled set.
  5. Reload the login page and confirm it falls back to the account default locale rather than displaying the unsupported language.

Regulated industries and white-label deployments require control over the legal notices displayed during authentication. By default, Instant ID as a service login pages display Entrust's copyright, Terms of Service link, and Privacy Statement link in the footer. You can replace these with your organization's own legal references, or remove the footer entirely for kiosk or embedded use cases.

Before you begin​

  • You have a Site Administrator role with permission to modify customization settings.
  • You have the URLs for your organization's Terms of Service and Privacy Statement pages.
  • You have your preferred copyright text.

Display your organization's legal notices instead of the Entrust defaults.

  1. Go to Customization > Theme.
  2. Select the Custom Theme tab.
  3. Expand the Login Layout and Flow section.
  4. Scroll to the Footer configuration area.
  5. Set Show Footer to Yes.
  6. Set Show Copyright to Yes and enter your copyright text in the Copyright Text field.
  7. Set Show Terms of Service to Yes and enter your organization's Terms of Service URL.
  8. Set Show Privacy Statement to Yes and enter your organization's Privacy Statement URL.
  9. Click Save.

Warning: When you customize footer legal items, all visible items must be customized together. For example, if you show Copyright, Terms of Service, and Privacy Statement, you must provide custom values for all three. You cannot mix Entrust-branded defaults with custom values. However, if you hide an item, you do not need to provide a custom value for it.

You do not have to display every element in the footer. Each item can be hidden independently while keeping the footer itself visible.

  1. In the Footer configuration area, set any combination of the following to No:
    • Show Copyright — Hides the copyright text.
    • Show Terms of Service — Hides the Terms of Service link.
    • Show Privacy Statement — Hides the Privacy Statement link.
    • Show Entrust Logo — Hides the Entrust logo.
  2. Click Save.

Remove the footer entirely from authentication pages. This is useful for kiosk deployments, embedded login flows, or when legal notices are presented elsewhere in your application.

  1. In the Footer configuration area, set Show Footer to No.
  2. Click Save.

Info: Footer visibility is a global setting. When you hide the footer, it is removed from both entry pages (login, registration, password reset) and the administration portal.

Verify​

After saving your footer configuration:

  1. Open a private browser window and navigate to your tenant login page.
  2. Confirm the footer displays your custom copyright text, Terms of Service link, and Privacy Statement link (or confirm the footer is hidden, depending on your configuration).
  3. Sign in to the administration portal and confirm the footer renders consistently there as well.