Customize your Microsoft 365 login portal with company branding to prevent phishing attacks and improve user trust. Configure logos, backgrounds, and security messaging through Microsoft Entra admin center.
Phishing attacks targeting Microsoft 365 credentials have become increasingly sophisticated, with attackers creating convincing fake login pages that mimic the standard Microsoft interface. By customizing your organization's login page with company branding, you create a visual authentication method that helps users distinguish legitimate login pages from fraudulent ones.
A branded login page serves as an immediate visual cue that users are accessing your organization's legitimate Microsoft 365 portal. When employees see your company logo, colors, and security messaging, they can confidently proceed with authentication. Conversely, the absence of expected branding on a login page should raise immediate red flags about potential phishing attempts.
Microsoft's company branding feature allows you to customize various elements of the sign-in experience, including background images, logos, favicons, and custom messaging. These changes apply to all Microsoft 365 services accessed by your organization's users, creating a consistent branded experience across the entire platform. The branding configuration is managed through the Microsoft Entra admin center and typically propagates within hours of implementation.
This tutorial walks you through the complete process of implementing company branding for your Microsoft 365 login page, from accessing the admin center to educating users about the enhanced security features. You'll learn to configure all branding elements effectively while following security best practices that maximize protection against phishing attacks.
Navigate to the Microsoft Entra admin center where you'll configure your organization's sign-in branding. This is the central hub for all identity and access management settings.
Open your browser and go to entra.microsoft.com. Sign in with your Global Administrator credentials. You'll see the main dashboard with various identity management options.
Once logged in, look for the navigation menu on the left side. Click on Identity to expand the menu, then select User experiences. If you don't see all options immediately, click Show more to reveal additional settings.
https://entra.microsoft.com/#view/Microsoft_AAD_IAM/CompanyBrandingMenuBlade for quick access in the future.Click on Company branding from the expanded menu. This opens the branding configuration interface where you'll customize your sign-in experience.
Verification: You should see the Company branding page with options to configure or edit your branding settings. If you see an "Access denied" error, verify your Global Administrator permissions.
Before uploading any images, you need to prepare your branding assets according to Microsoft's specific requirements. Getting these specifications right prevents upload failures and ensures optimal display across devices.
Create or gather these essential branding elements:
Use image editing software to resize your assets. For the favicon, ensure it's exactly 32x32 pixels and under 5KB. Most company logos need resizing for optimal display in the header area.
Save your prepared images in an easily accessible folder on your computer. Name them clearly (e.g., "company-favicon.png", "header-logo.png", "background-image.jpg") to avoid confusion during upload.
Verification: Check each image file's properties to confirm dimensions and file sizes meet the requirements. Right-click the file and select Properties (Windows) or Get Info (Mac) to verify.
Start customizing your sign-in page by configuring the fundamental branding elements. These basic settings form the foundation of your branded login experience.
In the Company branding interface, click Edit or Configure to open the branding settings. You'll see several tabs: Basics, Layout, Header, Footer, and Advanced.
Begin with the Basics tab:
The favicon appears in browser tabs and bookmarks, while the background image sets the visual tone for your login page. Choose images that reflect your brand identity and maintain professionalism.
After uploading, you'll see a preview of how your branding elements will appear. Review this carefully before proceeding to ensure the visual impact matches your expectations.
Verification: The preview should show your favicon and background image properly loaded. If you see error messages, check that your images meet the size and format requirements.
Choose the right layout template to ensure your background image is visible and your branding makes maximum impact. The template selection significantly affects how users perceive your login page.
Navigate to the Layout tab in the branding configuration. You'll see template options that determine how your background image displays:
Select Partial-screen background for optimal results. This template positions the login form to one side, allowing your background image to remain prominently displayed.
Enable the Header & Footer option to add additional branding elements and helpful information for users. This creates space for your company logo in the header and contact information in the footer.
Review the layout preview to see how your chosen template affects the overall appearance. The preview updates in real-time as you make selections.
Verification: The preview should show your background image clearly visible with the login form positioned appropriately. If the background is completely hidden, switch to the partial-screen template.
Add your company logo to the header and configure footer information to create a complete branded experience. These elements reinforce your organization's identity and provide helpful user guidance.
Switch to the Header tab and upload your banner logo:
The header logo replaces the default Microsoft branding and appears prominently at the top of the sign-in page. Choose a logo that's clear and recognizable at the display size.
Move to the Footer tab to add helpful information:
Example footer text:
For technical support, contact IT Help Desk: +1-555-0123 or helpdesk@yourcompany.com
By signing in, you agree to our IT Security Policy.Verification: Check the preview to ensure your header logo displays clearly and footer text is readable and properly formatted.
Configure custom sign-in page text that helps users identify legitimate login pages and provides security guidance. This text serves as an additional layer of phishing protection.
In the branding configuration, locate the Sign-in page text section. This field allows you to add custom messaging that appears on the login page to guide users and enhance security awareness.
Add security-focused messaging such as:
Welcome to [Your Company Name] secure portal.
Always verify you're on the official login page before entering credentials.
Never enter your password on suspicious or unfamiliar websites.
Report phishing attempts to security@yourcompany.comThis messaging serves multiple purposes:
Keep the message concise but informative. Users should be able to quickly read and understand the security guidance without feeling overwhelmed.
Verification: Review the preview to ensure your security message displays prominently and doesn't interfere with the login form usability.
Set up language-specific branding if your organization serves users in multiple regions or languages. This ensures a consistent branded experience regardless of user language preferences.
In the Company branding interface, look for language configuration options. You can create separate branding configurations for different languages while maintaining consistent visual elements.
To add a new language configuration:
Example multilingual security message (Spanish):
Bienvenido al portal seguro de [Nombre de su empresa].
Siempre verifique que está en la página de inicio de sesión oficial antes de ingresar credenciales.
Nunca ingrese su contraseña en sitios web sospechosos o desconocidos.Maintain visual consistency across all language versions by using the same logos, colors, and background images. Only translate text elements to preserve brand recognition.
Verification: Test each language configuration by changing your browser's language settings and accessing the sign-in page to confirm proper display.
Save your branding configuration and verify that changes propagate correctly across Microsoft's infrastructure. This final step ensures your branded login page is active and functioning properly.
After completing all branding configurations, click the Save button at the bottom of the interface. You should see a confirmation message indicating that your changes have been saved successfully.
Microsoft's system needs time to propagate your changes across their global infrastructure. This process can take anywhere from a few seconds to several hours, depending on various factors.
To test your branded login page:
login.microsoftonline.comIf changes aren't visible after several hours:
Verification: Your branded login page should display your favicon, background image, header logo, and custom messaging. The URL should remain on Microsoft's official domain (login.microsoftonline.com or similar).
Communicate the branding changes to your users and provide security education about identifying legitimate login pages. User awareness is crucial for maximizing the security benefits of your branded login page.
Create a communication plan that includes:
Example user communication email template:
Subject: New Secure Login Experience - Important Security Update
Dear Team,
We've enhanced our Microsoft 365 login page with company branding for improved security.
What to expect:
- Our company logo and colors on the login page
- Security messaging confirming you're on the official site
- Consistent branding across all Microsoft 365 services
Security reminder: Always verify you're on login.microsoftonline.com before entering credentials.
Report suspicious login pages to security@yourcompany.com
Questions? Contact IT Help Desk at [contact info]Consider adding the branded login page information to your security awareness training program and new employee onboarding materials.
Verification: Monitor your IT help desk for user questions about the new branding and track any reported phishing attempts to measure the effectiveness of your security messaging.
Deepen your knowledge with related resources
Share your thoughts and insights
Sign in to join the discussion
