Branding overview
SecureAuth allows you to customize the end-to-end identity experience to reflect your organization's brand identity across both customer and workforce use cases.
Branding in SecureAuth extends beyond login screens. It encompasses all user-facing identity components—including authentication flows, portals, self-service pages, transactional emails and SMS, and access URLs. This ensures a cohesive and trusted user journey across every interaction.
Depending on your requirements, you can use either Basic Branding (through the admin UI) or Advanced Branding (via theme packages and developer tooling).
Branding Options
The table below compares capabilities available in Basic vs. Advanced branding methods:
| Feature | Basic Branding (UI-based) | Advanced Branding (Theme-based) |
|---|---|---|
| Logo & Favicon | ✅ Upload via admin UI | ✅ Fully customizable per theme |
| Button & Background Colors | ✅ Set using color pickers | ✅ Styled using custom CSS/Tailwind |
| Font Selection | ✅ Choose from predefined fonts | ✅ Full control using custom fonts and CSS |
| Layout Customization | ❌ Not available | ✅ Modify layout with templates and overrides |
| Field Visibility (e.g., username) | ❌ Not configurable | ✅ Enable/disable fields via configuration |
| Consent and Legal Text | ✅ Editable text blocks | ✅ Fully customizable including layout and logic |
| Multi-tenant Branding | ✅ Per workspace branding | ✅ Theme variants per workspace or domain |
| Self-Service Branding | ✅ Admins can configure via UI | ⚠️ Requires developer access and testing |
| Live Preview Support | ✅ Built-in editor for workspace UI preview | ✅ Theme preview with real-time updates |
Use Basic Branding for quick visual updates like uploading logos, choosing fonts, and applying workspace-specific settings through the UI.
Use Advanced Branding when you need layout control, conditional logic, or tenant-level theming across custom domains.
SecureAuth includes live preview editors for both branding modes:
- Basic Branding provides a real-time UI preview for workspace-level changes.
- Advanced Branding supports in-platform theme previews with real-time feedback on layout and styling.
Advanced themes can be managed in a source-controlled Git repository, enabling versioned updates, team collaboration, and automated promotion across development, staging, and production environments using CI/CD pipelines.
Multi-Brand Experiences Using Workspaces
SecureAuth supports multi-brand identity experiences using workspaces within a single tenant. Each workspace can represent a different application, business unit, region, or customer group—with its own user-facing identity experience.
Common use cases for workspace-specific branding:
- Distinct login flows for multiple business units or brands
- Regional or localized styling for global identity programs
- B2B portals with partner-specific look and feel
Within each workspace, you can:
- Apply unique logos, colors, and font choices
- Customize consent text, support links, and UI labels
- Use live previews to validate branding before publishing
- Manage themes independently for flexible deployment
Workspace-level branding is supported in both Basic and Advanced modes. Basic branding uses the admin UI for configuration, while advanced themes offer full customization scoped to each workspace or domain.
Communication Customization
Branding also extends to outbound communication touchpoints such as email and SMS, ensuring visual and contextual consistency across transactional messages.
Email Configuration
- Customizable templates for system-generated and transactional emails
- Support for branded subject lines, headers, and content styling
- Language and locale-specific versions
- Use of dynamic variables and branding placeholders
SMS Configuration
- Configurable templates for one-time passcodes (OTP), alerts, and password resets
- Optional branded sender names (carrier support dependent)
- Localized message content
Internationalization and Localization
SecureAuth supports internationalized identity experiences by allowing you to localize UI content, emails, and SMS messages across different languages and regions.
UI and Portal Localization
- Localize login pages, consent screens, error messages, and portal content
- Language is auto-selected based on user browser locale or custom logic
- Workspace-level overrides allow different regions or brands to serve different languages
Email and SMS Localization
- Email templates can include language-specific versions
- SMS templates can be localized for OTP, alerts, and other use cases
- Dynamic variables (e.g., names, codes, links) remain consistent across translations
Translation Management
- Built-in support for common languages (English, Spanish, French, etc.)
- Admin UI allows you to preview and update translations for each UI label
- Advanced themes support JSON-based translation bundles for fully customized deployments
Localization settings can be applied per workspace, tenant, or dynamically based on user preferences and claims. This enables multi-regional deployments under a single identity platform.
Domain and Delivery Settings
Beyond UI and communication, SecureAuth allows you to customize access URLs and message delivery infrastructure for a fully branded experience.
Vanity Domains
- Host login experiences on custom domains (e.g.,
login.yourbrand.com) - TLS certificate support for secure domain branding
- Enables domain-isolated branding per customer, workspace, or region
SMTP Providers
- Integrate your own SMTP services for outbound email delivery
- Customize from/reply-to identity
- Configure failover strategies for high availability
SMS Providers
SecureAuth currently supports Twilio as the default SMS provider. You can configure:
- Twilio Account SID and Auth Token
- From number / Sender ID (where supported)
- Message encoding and regional delivery settings
Choosing the Right Approach
| Use Case | Recommended Option |
|---|---|
| Quick visual customization | Basic branding via UI |
| Workspace-specific styling | Basic branding per workspace |
| Font and color control | Basic branding or advanced theme styling |
| Layout and field customization | Advanced branding with themes |
| Partner-specific login URLs | Vanity domains with workspace or theme |
| Custom email experience | Email templates and SMTP configuration |
| Source-controlled deployment | CI/CD-managed advanced themes |
Related Topics
- Simple Branding Setup
- Advanced Branding with Themes
- Configure SMS Providers
- Email Templates and SMTP
- Vanity Domains
Branding applies to both CIAM and Workforce configurations. For CIAM, it enhances the customer experience and drives trust at every touchpoint. For Workforce, it reinforces internal adoption and consistency across enterprise applications.