Company Branding Css Template
In brief
Reference guide for the CSS template selectors for customizing Microsoft Entra sign-in page company branding.
What Entra admins need to know
Review the documentation change to determine whether it affects tenant configuration, security posture, or rollout plans.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
The comparison below is an extract of the Microsoft Learn article showing only the changed content. Open the full article for complete context.
Configuring your company branding for the user sign-in process provides a seamless experience in your applications that use Microsoft Entra ID as the identity and access management service. Use this CSS reference guide if you're using the CSS template as part of the customize company branding process.
Deprecation of custom CSS positioning properties
As part of the Microsoft Secure Future Initiative, Microsoft Entra ID is retiring support for custom CSS positioning properties in company branding. These properties control where elements appear on the sign-in page and how they're layered, sized, and displayed. For example, they can move, overlap, resize, or hide page content. Retiring them keeps sign-in page layouts consistent and predictable across Microsoft Entra ID.
This change is the first step toward retiring the custom CSS feature entirely. Microsoft plans to provide advance notice, recommended migration paths, and future advanced customization options before that retirement.
For more information, see the blog post Microsoft Entra ID enhances security of branded sign-ins.
Timeline
- After July 21, 2026: Tenants that don't already use the affected positioning properties can't configure them.
- Later: The affected positioning properties will be deprecated globally. After deprecation, these properties are blocked and no longer function.
- Eventually: Custom CSS will be fully retired. Microsoft will share more guidance, including recommended migration paths, before retirement.
Who's affected
This change affects organizations whose Microsoft Entra ID tenant uses any of the deprecated positioning properties in their custom CSS. Microsoft Entra External ID tenants aren't affected. Tenants that don't already use these properties aren't affected, because they can't configure the properties after July 21, 2026.
Microsoft notifies affected customers directly in advance.
Deprecated properties
If your custom CSS uses any of the following properties, remove them from your configuration. These properties don't have a supported migration or replacement.
position(includingtop,right,bottom,left, andz-index)margin(includingmargin-top,margin-bottom,margin-left, andmargin-right)transformtranslateopacityoverflowfilterpointer-eventsclip-pathmix-blend-mode
Check and update your custom CSS
To check whether your custom CSS uses any deprecated properties, use Microsoft Graph to export your current company branding configuration, and then check it with the tenant branding inspector tool. You need a Global Administrator or Branding Administrator account.
Go to Microsoft Graph Explorer, and then sign in to your tenant.
If you don't already know your tenant ID, send a
GETrequest to the following URL, and then copy theidvalue from the response:https://graph.microsoft.com/v1.0/organizationSend a
GETrequest to the following URL to return all configured company branding localizations. Replace<tenant-id>with your tenant ID:https://graph.microsoft.com/v1.0/organization/<tenant-id>/branding/localizationsCopy the response, or export it to a JSON file.
Go to the tenant branding inspector tool.
Paste the copied response, or upload the exported JSON file, into the tool. The tool lists each locale and the deprecated properties that it uses.
To remove the deprecated properties, edit your CSS file, upload it on the Company Branding page in the Microsoft Entra admin center, and then save your changes. To validate the visual impact before you update production, apply the changes in a test tenant first.
HTML selectors
The following CSS styles become the default body and link styles for the whole page. Styles that you apply to other links or text override these selectors.
body- Styles for the whole pageStyles for links:
Styles for secondary buttons:
.ext-button.ext-secondary- Secondary buttons.ext-button.ext-secondary:hover- When the mouse is over the button.ext-button.ext-secondary:focus- When the button has focus.ext-button.ext-secondary:focus:hover- When the button has focus and the mouse is over the button.ext-button.ext-secondary:active- When the button is being clicked
:::image type="content" source="media/reference-company-branding-css-template/boilerplate-fed-cred.png" alt-text="Screenshot of the sign-in box with the optional boilerplate text area highlighted.":::
Styles for the footer:
.ext-footer- Footer area at the bottom of the page.ext-footer-links- Links area in the footer at the bottom of the page.ext-footer-item- Link items (such as "Terms of use" or "Privacy & cookies") in the footer at the bottom of the page
@@ -3,9 +3,10 @@ title: CSS reference guide for customizing company branding description: Reference guide for the CSS template selectors for customizing Microsoft Entra sign-in page company branding. manager: pmwongera ms.topic: reference-ms.date: 12/16/2025+ms.date: 07/21/2026 ms.reviewer: almars-ms.custom: sfi-image-nochange+ms.custom: sfi-image-nochange, msecd-doc-authoring-1015+ai-usage: ai-assisted #Customer Intent: As an IT admin, I want to reference the CSS template for customizing company branding so that I can style my organization's sign-in pages. --- @@ -14,13 +15,71 @@ ms.custom: sfi-image-nochange Configuring your company branding for the user sign-in process provides a seamless experience in your applications that use Microsoft Entra ID as the identity and access management service. Use this CSS reference guide if you're using the [CSS template](https://download.microsoft.com/download/7/2/7/727f287a-125d-4368-a673-a785907ac5ab/custom-styles-template-013023.css) as part of the [customize company branding](reference-company-branding-css-template.md) process. > [!IMPORTANT]-> Tenants created after January 5, 2026, will not have custom CSS available for company branding in Microsoft Entra ID tenants. Tenants created before January 5 can continue to use custom CSS.-> -> Microsoft Entra External ID tenants are not affected.+> Tenants created after January 5, 2026 don't have custom CSS available for company branding in Microsoft Entra ID. Tenants created before January 5, 2026, can continue to use custom CSS.+>+> Microsoft Entra External ID tenants aren't affected.++## Deprecation of custom CSS positioning properties++As part of the [Microsoft Secure Future Initiative](https://www.microsoft.com/trust-center/security/secure-future-initiative), Microsoft Entra ID is retiring support for custom CSS *positioning properties* in company branding. These properties control where elements appear on the sign-in page and how they're layered, sized, and displayed. For example, they can move, overlap, resize, or hide page content. Retiring them keeps sign-in page layouts consistent and predictable across Microsoft Entra ID.++This change is the first step toward retiring the custom CSS feature entirely. Microsoft plans to provide advance notice, recommended migration paths, and future advanced customization options before that retirement.++For more information, see the blog post [Microsoft Entra ID enhances security of branded sign-ins](https://techcommunity.microsoft.com/blog/microsoft-entra-blog/microsoft-entra-id-enhances-security-of-branded-sign-ins/4537471).++### Timeline++- **After July 21, 2026**: Tenants that don't already use the affected positioning properties can't configure them.+- **Later**: The affected positioning properties will be deprecated globally. After deprecation, these properties are blocked and no longer function.+- **Eventually**: Custom CSS will be fully retired. Microsoft will share more guidance, including recommended migration paths, before retirement.++### Who's affected++This change affects organizations whose Microsoft Entra ID tenant uses any of the deprecated positioning properties in their custom CSS. Microsoft Entra External ID tenants aren't affected. Tenants that don't already use these properties aren't affected, because they can't configure the properties after July 21, 2026.++Microsoft notifies affected customers directly in advance.++### Deprecated properties++If your custom CSS uses any of the following properties, remove them from your configuration. These properties don't have a supported migration or replacement.++- `position` (including `top`, `right`, `bottom`, `left`, and `z-index`)+- `margin` (including `margin-top`, `margin-bottom`, `margin-left`, and `margin-right`)+- `transform`+- `translate`+- `opacity`+- `overflow`+- `filter`+- `pointer-events`+- `clip-path`+- `mix-blend-mode`++### Check and update your custom CSS++To check whether your custom CSS uses any deprecated properties, use Microsoft Graph to export your current company branding configuration, and then check it with the tenant branding inspector tool. You need a Global Administrator or Branding Administrator account.++1. Go to [Microsoft Graph Explorer](https://developer.microsoft.com/graph/graph-explorer), and then sign in to your tenant.+1. If you don't already know your tenant ID, send a `GET` request to the following URL, and then copy the `id` value from the response:++ ```http+ https://graph.microsoft.com/v1.0/organization+ ```++1. Send a `GET` request to the following URL to return all configured company branding localizations. Replace `<tenant-id>` with your tenant ID:++ ```http+ https://graph.microsoft.com/v1.0/organization/<tenant-id>/branding/localizations+ ```++1. Copy the response, or export it to a JSON file.+1. Go to the [tenant branding inspector tool](https://entra-branding-tools.github.io/tenant-branding-inspector/).+1. Paste the copied response, or upload the exported JSON file, into the tool. The tool lists each locale and the deprecated properties that it uses.++To remove the deprecated properties, edit your CSS file, upload it on the **Company Branding** page in the [Microsoft Entra admin center](https://entra.microsoft.com), and then save your changes. To validate the visual impact before you update production, apply the changes in a test tenant first. ## HTML selectors -The following CSS styles become the default body and link styles for the whole page. Applying styles for other links or text override CSS selectors.+The following CSS styles become the default body and link styles for the whole page. Styles that you apply to other links or text override these selectors. - `body` - Styles for the whole page - Styles for links:@@ -70,7 +129,7 @@ Use the following CSS selectors to configure the details of the sign-in experien - Styles for secondary buttons: - `.ext-button.ext-secondary` - Secondary buttons - `.ext-button.ext-secondary:hover` - When the mouse is over the button- - `.ext-button.ext-secondary:focus` When the button has focus+ - `.ext-button.ext-secondary:focus` - When the button has focus - `.ext-button.ext-secondary:focus:hover` - When the button has focus *and* the mouse is over the button - `.ext-button.ext-secondary:active` - When the button is being clicked @@ -94,7 +153,7 @@ Use the following CSS selectors to configure the details of the sign-in experien :::image type="content" source="media/reference-company-branding-css-template/boilerplate-fed-cred.png" alt-text="Screenshot of the sign-in box with the optional boilerplate text area highlighted."::: -- Styles for the footer:+- Styles for the footer: - `.ext-footer` - Footer area at the bottom of the page - `.ext-footer-links` - Links area in the footer at the bottom of the page - `.ext-footer-item` - Link items (such as "Terms of use" or "Privacy & cookies") in the footer at the bottom of the page 