Customization
On the Customization page, you can configure features that control the Specops Authentication end-user interface, including logos, text, and colors.
Changing the Main Logo
The logo at the top left of the page, both in Authentication Web and the Specops Client, can be changed to match your requirements.
- In the Image tab, click Browse under Main logo and select the image you want to use.
- Click OK.
- Click Upload to place the image.
To revert to the default image, click Default.
Main Logo Image Specifications
The following specifications apply to the main logo image:
- Supported file types: png, gif, jpg.
- Maximum file size: one megabyte (1 MB).
- Transparency in png images will be rendered as expected, with the background color showing through the transparent parts.
- Image will be rendered with a height of 40 pixels.
- Aspect ratio of the uploaded file will always be kept intact.
- Images with a height less than 40 pixels will be scaled up to 40 pixels. The quality of the rendered image will decrease.
- Images with a height above 40 pixels will be scaled down to 40 pixels. Quality is not necessarily affected.
- For the best results, use an image width with a height of exactly 40 pixels and a width that is no greater than 300 pixels. If the image is too wide, there won’t be sufficient room to render the menu items in the header.
Changing the Login Image
You can also change the image on the login page that is presented to users.
- In the Image tab, click Browse under Login image and select the image you want to use.
- Click OK.
- Click Upload to place the image. The image will appear at the top left of the page.
To revert to the default image, click Default.
Login Image Specifications
The specifications for the login image are the same as for the logo (above), except for the size. The login image has a maximum width of 235 pixels. Images less than 235 px wide will be scaled up (which will decrease the quality of the image), and images more than 235 px wide will be scaled down. The aspect ratio of the original image will always be kept in the rendered image.
Changing the Colors
Various colors in the interface can be changed to match your company’s look and feel. The colors that can be changed are:
- Page background (page’s main content area)
- Menu background (top and side navigation)
- Sign-in background (login page)
- Default button (primary buttons)
- Secondary button (buttons such as Cancel etc.)
- Information box background (textboxes with additional information)
To change the color:
- In the Style tab, select the checkbox in the Customized column next to the color you want to change.
- Select the color you want to use:
- Click the color-picker icon in the Pick color column and select the color you want, then click OK OR
- Enter the HTML color code (hexadecimal color code) in the text field.
To revert a particular item to its default color, uncheck the Customized checkbox for that item and click Save.
To revert to the default color for all elements, click Default.
Changing the Texts
Various texts that are presented to the user in messages and notifications can also be changed.
- In the Text tab, select the language you want to make changes to by clicking the tab for that language.
- Click the text element you want to change, for example Satisfied, header.
- Select Use custom.
- Enter the text you want to use in the Custom text field and click Save. The Customized column in the list will now show a checkmark at the text element you changed, while the Current value shows the new text.
To revert to the default text, click the text element, and select Use original, then Save. This will delete the custom text. Note that only deleting the custom text will not revert the text element to the default state (instead, the text field will then be blank).
Changing the Names of Identity Services
The names of some identity services can be changed to better reflect the way in which they are used in your organization. The identity service names that can be changed are:
- Email (IdService_PrimaryEmail)
- Manager Identification (IdService_ManagerIdentification)
- Mobile Code (IdService_MobileCode)
- Personal Email (IdService_AlternateEmail)
- Secret Questions (IdService_QAndA)
- Windows Identity (IdService_WindowsIdentity)
Identity service names are changed in the same way as other texts, in the Texts table.
Enrollment
| Text element | Description | Original text |
|---|---|---|
| Satisfied, header | When a user has enrolled with enough identity services to meet the weight requirements, they are sent to a page telling them so and are given the option to continue or end the enrollment process. This is the header on that page. | All done! |
| Satisfied, message | When a user has enrolled with enough identity services to meet the weight requirements, they are sent to a page telling them so and are given the option to continue or end the enrollment process. This is the information text on that page. | You have collected enough stars for your enrollment. Feel free to improve your enrollment information by collecting more stars. |
| Change Registrations, message | This text is displayed on the page where the user selects identity services during the enrollment process. Specifically, this text is used when the user has opted to make changes to an already complete enrollment. | Add or change identity services from the lists below. Make sure your star bar is still full after the changes. |
| Instructions | This text is displayed on the page where the user selects identity services during the enrollment process. | Use the identity services below to identify yourself until you have collected enough stars to fill the star bar. |
| Reminder, header | This is the header that will be displayed on the first page of the enrollment wizard, before the user needs to enter their password. | Enrollment Reminder |
| Reminder, message | This text will be displayed on the first page of the enrollment wizard, before the user needs to enter their password. | You are required to enroll for the Password Reset service. Press the button below to start the enrollment wizard. |
| Finished, message | This is displayed on the final page of the enrollment process after the user has enrolled with all available identity services or they have selected the "I'm done" option" and not "Collect more stars". | You have completed the enrollment, you can now close this browser and move on with your day. |
| Already enrolled, header | Already enrolled, header | Enrolled |
| Already enrolled, message | Already enrolled, message | You are already enrolled! If you want to, you can enroll with additional identity services or make changes to the identity services you are enrolled with. |
Mfa
| Text element | Description | Original text |
|---|---|---|
| Select Identity Service, message | This text is displayed on the page where the user selects identity services during the login process. | Use the identity services below to identify yourself until you have collected enough stars to fill the star bar. |
| Cannot enroll because no policy, header | This title is displayed when a user who does not have a policy configured tries to sign in. | You cannot enroll for this service |
| Cannot enroll because no policy, message | This message is displayed when a user who does not have a policy configured tries to sign in. | No policy has been configured for you for this service. |
| Enrollment Missing, header | This header is displayed when a user is not enrolled for uReset and tries to reset their password. | Enrollment missing |
| Cannot Reset Password, not enrolled with uReset | This text is displayed when a user is not enrolled for uReset and tries to reset their password. | You cannot reset your password because you have not enrolled for the reset password service. |
| Cannot Sign in from Untrusted IP | This text is displayed to an end user when they are trying to sign in but are disallowed due to not connecting from a trusted network location. | You cannot sign in to the {0} resource because you are not connecting from a Trusted Network Location. |
| Microsoft Authenticator sign-in instructions | This text is displayed on the Microsoft Authenticator page during authentication. | - |
Service Desk
| Text element | Description | Original text |
|---|---|---|
| Search Users | This text is displayed on the {0} start page. | Use the search box to find users. You can search by account names, email addresses or users' real names. |
| Advanced Verification default text message body | When using Browser-link verification methods, a Service Desk agent can send a text message to the user containing a verification link. The message's default text is determined by this text message template. It can be changed by the Service Desk agent before sending. | Verify your identity here {url} |
| Advanced Verification default email subject | When using Browser-link verification methods, a Service Desk agent can send an email to the user containing a verification link. The email's default text is determined by this email subject template. It can be changed by the Service Desk agent before sending. | Verify your identity |
| Advanced Verification default email body | When using Browser-link verification methods, a Service Desk agent can send an email to the user containing a verification link. The email's default text is determined by this email body template. It can be changed by the Service Desk agent before sending. | Use this link to verify your identity {url} |
| RSA SecurID token verification instructions | Describes how the users handle token verification with their RSA SecurID devices. This text should specify if the verification requires token and/or PIN. {0} will be replaced with 'RSA SecurID' but adding this placeholder is not required. | Enter a code from the {0} app. |
| RSA SecurID code verification instructions | Describes how the users handle token verification with their RSA SecurID devices. This text should specify if the verification requires token and/or PIN. {0} will be replaced with 'RSA SecurID' but adding this placeholder is not required. | Enter a code from the {0} app. |
| Password Reset - User Notification Message Body | Describes the text message body for the user password reset notification. This text should specify the message body details. | Your new password is: {password} |
| Password Reset - Manager/Custom Notification Message Body | Describes the message body for the manager/custom password reset notification. This text should specify the message body details. | The new password for {upn} is: {password} |
| Password Reset - User Notification Sms Body | Describes the message body for the user password reset notification. | New password: {password} |
| Specops Verified ID default email body with QR-code | During user verification, this is the default email that can be sent to the user containing a QR-code to scan. | Please scan the QR-Code below to start the verification. {specopsIdLink} |
| Specops Verified ID default text message with start app link | During user verification, this is the default text message that can be sent to the user containing a link to click. | Please click the link to start the verification. {specopsIdLink} |
| Specops Verified ID default email body to custom email with QR-code | During user verification, this is the default email to custom address that can be sent to the user containing a QR-code to scan. | To verify as {upn}, scan the QR-Code below to start the verification. {specopsIdLink} |
Password Change/Reset
| Text element | Description | Original text |
|---|---|---|
| Password Change - Success, message | This text is displayed when the user is done with a password reset or a password change. | Your password has been changed! If you are using a Windows computer, it is recommended to sign out and sign in again with your new password. Also, don't forget to update to your new password in for example the email app on your phone, if necessary. |
| Password Change - Success, message for Secure Browser | This text is displayed when the user is done with a password reset or password change that started from the Windows identity password view. | Your password has been changed! Don't forget to update to your new password in for example the email app on your phone, if necessary. |
| Password Change/Reset - Instructions, message | This text is displayed above the password rules when a user is about to perform a password change or password reset. | |
| Password Change/Reset - Instructions, message on mobile | This text is displayed on small devices where the user clicks to expand the password instructions, above the password rules when a user is about to perform a password change or password reset. | Show instructions |
| Password selection page - Instructions | This text is displayed on the password start page where the user can select between a password change and a password reset. | Need to change your password? If you know your current password, you can sign in with that in order to change it. If you have forgotten your password, you can use the second option to sign in and then reset your password. |
| Password selection page - Title | This text is displayed on the password start page. This is the section title. | New password |
| Password selection page - Change password button | This button is displayed on the password start page. This button initiates a password change when the password is known. | I know my password |
| Password selection page - Reset password button | This button is displayed on the password start page. This button initiates a password change when the password is not known. | I forgot my password |
Other
| Text element | Description | Original text |
|---|---|---|
| Username label on username page | This text is displayed when a user enters their username during sign-in. | Username |
| Username label on password page | This text is displayed when a user enters their username during sign-in. | Username |
| RSA SecurID token verification instructions | Describes how the users handle token verification with their RSA SecurID devices. This text should specify if the verification requires token and/or PIN. {0} will be replaced with 'RSA SecurID' but adding this placeholder is not required. | Enter a code from the {0} app. |
| RSA SecurID code verification instructions | Describes how the users handle token verification with their RSA SecurID devices. This text should specify if the verification requires token and/or PIN. {0} will be replaced with 'RSA SecurID' but adding this placeholder is not required. | Enter a code from the {0} app. |
| Unlock selection page - Instructions | This text is displayed on the unlock start page where the user can unlock their account if the password is known. | If you know your current password, but the account is locked out, you can unlock it to be able to sign in. |
| Unlock selection page - Title | This text is displayed on the unlock start page. This is the section title. | Unlock account |
| Username placeholder on username page | This text is displayed inside the username field before the user starts typing at sign-in. | username@domain.com |
Identity Service
| Text element | Description | Original text |
|---|---|---|
| Display name for Windows Identity | This text will replace the display name for the Windows Identity identity service where the identity service is used. | Windows Identity |
| Display name for Mobile Code | This text will replace the display name for the Mobile Code identity service where the identity service is used. | Mobile Code |
| Display name for Email | This text will replace the display name for the Email identity service where the identity service is used. | |
| Display name for PersonalEmail | This text will replace the display name for the Personal Email identity service where the identity service is used. | Personal Email |
| Display name for Manager Identification | This text will replace the display name for the Manager Identification identity service where the identity service is used. | Manager Identification |
| Display name for Secret Questions | This text will replace the display name for the Secret Questions identity service where the identity service is used. | Secret Questions |
First Day Password
| Text element | Description | Original text |
|---|---|---|
| First Day Password start page title | Title for the First Day Password landing page | Setting a password |
| First Day Password start page description | Description on the First Day Password landing page | It is time to select your first password. On the next page you will see a list of rules and restrictions for how a password can be constructed. Once you are happy with your password, you will need to repeat it in the second box. |
| Invalid First Day Password URL message | Information to end user when the link has expired or is invalid | This link for setting your password has expired or is invalid, contact your admin for help. |
| Not eligible for First Day Password | Error message when a user is not eligible for First Day Password after signing in | You are not currently eligible for the First Day Password process. |
| First Day Password set initial password information | Optional information displayed to the user on top of the reset page when setting their first password. | Now you get to create a password. Make sure the password meets the requirements listed below and then type it again in the second box. |
| First Day Password completed message | This text is displayed when the First Day Password user is done with password setup. | Your Windows password has now been set. |
| First Day Password completed message, no enroll redirect, in Secured Browser | This text is displayed when a First Day Password user has selected their password in the Secured Browser, and they are not required to continue with enrollment. | You are all done with the registration, click the button to close this window. |
| First Day Password completed message, no enroll redirect | This text is displayed when a First Day Password user has selected their password, and they are not required to continue with enrollment. | You are all done with the registration, you can close this browser now. |
Setting a Fallback Language
The fallback language allows administrators to designate secondary customized language strings in case no customized strings exist in the language the end user has set as their interface language. This means that administrators can make sure the correct text is always presented to the user.
- In Authentication Web go to Customization > Texts
-
Click on the tab of the language you want to set as the fallback language, and click Set as fallback language. The fallback language will be marked in bold.
Note
If a language has been set as the fallback language, the button will allow you to disable the fallback language, otherwise it will allow you to set it.
The order in which text strings are shown to the user is as follows:
- Customized value for the user’s current language.
- Customized value for the fallback language (if no customized value exists for the current language).
- Default text for the current language (if there are no customized values for either the current language or the fallback language).
This feature can be used to make sure that important custom message are always displayed to users, even when not all available languages have been updated with the same custom message. Example: if you have a custom message for the Enroll Completed message (Enroll_Completed_Message) in French, you can set English as the fallback language and make sure that the Enroll_Complete_Message string in English also has a customized value. If a user has their language set to anything other than French or English, they will still see the English message, even if there is no customized text for their current language.