Branding overview
You can customize your entire identity experience to match your organization's brand across both customer and workforce use cases.
Your branding extends beyond login screens. You can brand all user-facing identity components including authentication flows, portals, self-service pages, emails, SMS messages, and access URLs. This creates a consistent and trusted experience for users.
You can choose between Basic branding (through the admin UI) or Advanced branding (via theme packages and developer tooling).
💡 Why this matters
Branding applies to both CIAM and Workforce configurations. For CIAM, it enhances the customer experience and drives trust at every touchpoint. For Workforce, it reinforces internal adoption and consistency across enterprise applications.
Branding options​
Compare the capabilities available in basic and advanced branding:
| Feature | Basic Branding (UI-based) | Advanced Branding (Theme-based) |
|---|---|---|
| Logo and Favicon | Upload via admin UI | Fully customizable per theme |
| Button and Background Colors | Set using color pickers | Styled using custom CSS/Tailwind |
| Font Selection | Choose from predefined fonts | Full control using custom fonts and CSS |
| Layout Customization | Not available | Modify layout with templates and overrides |
| Field Visibility (e.g., username) | Not configurable | Enable/disable fields via configuration |
| Consent and Legal Text | Editable text blocks | Fully customizable including layout and logic |
| Multi-tenant Branding | Per workspace branding | Theme variants per workspace or domain |
| Self-Service Branding | Admins can configure via UI | Requires developer access and testing |
| Live Preview Support | Built-in editor for workspace UI preview | Theme preview with real-time updates |
Choosing your branding approach​
-
Use basic branding for quick visual updates like uploading logos, choosing fonts, and workspace-specific settings through the UI.
-
Use advanced branding when you need layout control, conditional logic, or tenant-level theming across custom domains.
-
Preview support: Both modes include live preview editors. Basic branding provides workspace-level previews, while advanced branding supports real-time theme previews.
-
Source control: You can manage advanced themes in Git repositories for versioned updates, team collaboration, and CI/CD promotion across environments.
Multi-brand experiences using workspaces​
You can create multi-brand identity experiences using workspaces within a single tenant. Each workspace can represent a different application, business unit, region, or customer group with its own user-facing identity experience.
Common use cases for workspace-specific branding​
- Distinct login flows for multiple business units or brands
- Regional or localized styling for global identity programs
- B2B portals with partner-specific look and feel
Within each workspace, you can:
- Apply unique logos, colors, and font choices
- Customize consent text, support links, and UI labels
- Use live previews to validate branding before publishing
- Manage themes independently for flexible deployment
You can use workspace-level branding in both basic and advanced modes. Basic branding uses the admin UI for configuration, while advanced themes offer full customization scoped to each workspace or domain.
Communication customization​
You can also brand your outbound communications like email and SMS. This ensures visual and contextual consistency across all messages.
Email configuration​
- Customizable templates for system-generated and transactional emails
- Support for branded subject lines, headers, and content styling
- Language and locale-specific versions
- Use of dynamic variables and branding placeholders
SMS configuration​
- Configurable templates for one-time passcodes (OTP), alerts, and password resets
- Optional branded sender names (carrier support dependent)
- Localized message content
Internationalization and localization​
You can create internationalized identity experiences by localizing UI content, emails, and SMS messages across different languages and regions.
UI and portal localization​
- Localize login pages, consent screens, error messages, and portal content
- Language is auto-selected based on user browser locale or custom logic
- Workspace-level overrides allow different regions or brands to serve different languages
Email and SMS localization​
- Email templates can include language-specific versions
- SMS templates can be localized for OTP, alerts, and other use cases
- Dynamic variables (e.g., names, codes, links) remain consistent across translations
Translation management​
- Built-in support for common languages (English, Spanish, French, etc.)
- Admin UI allows you to preview and update translations for each UI label
- Advanced themes support JSON-based translation bundles for fully customized deployments
You can apply localization settings per workspace, tenant, or dynamically based on user preferences and claims. This enables multi-regional deployments under a single identity platform.
Domain and delivery settings​
You can also customize access URLs and message delivery infrastructure for a fully branded experience.
Vanity domains​
- Host login experiences on custom domains (e.g.,
login.yourbrand.com) - TLS certificate support for secure domain branding
- Enables domain-isolated branding per customer, workspace, or region
SMTP providers​
- Integrate your own SMTP services for outbound email delivery
- Customize from/reply-to identity
- Configure failover strategies for high availability
SMS providers​
You can currently use Twilio as the default SMS provider. Configure these settings:
- Twilio Account SID and Auth Token
- From number / Sender ID (where supported)
- Message encoding and regional delivery settings
Choosing the right approach​
| Use Case | Recommended Option |
|---|---|
| Quick visual customization | Basic branding via UI |
| Workspace-specific styling | Basic branding per workspace |
| Font and color control | Basic branding or advanced theme styling |
| Layout and field customization | Advanced branding with themes |
| Partner-specific login URLs | Vanity domains with workspace or theme |
| Custom email experience | Email templates and SMTP configuration |
| Source-controlled deployment | CI/CD-managed advanced themes |