How Microsoft Entra ID Custom CSS Retirement Impacts Company Branding

Microsoft Entra custom CSS positioning properties

If your organization has customized the Microsoft Entra ID sign-in page using custom CSS, it’s time to review those configurations.

๐…๐ซ๐จ๐ฆ ๐Ž๐œ๐ญ๐จ๐›๐ž๐ซ ๐Ÿ๐Ÿ”, ๐Ÿ๐ŸŽ๐Ÿ๐Ÿ”, ๐„๐ง๐ญ๐ซ๐š ๐ฐ๐ข๐ฅ๐ฅ ๐ง๐จ ๐ฅ๐จ๐ง๐ ๐ž๐ซ ๐ฌ๐ฎ๐ฉ๐ฉ๐จ๐ซ๐ญ ๐ฌ๐ž๐ฏ๐ž๐ซ๐š๐ฅ ๐‚๐’๐’ ๐ฉ๐จ๐ฌ๐ข๐ญ๐ข๐จ๐ง๐ข๐ง๐  ๐ฉ๐ซ๐จ๐ฉ๐ž๐ซ๐ญ๐ข๐ž๐ฌ ๐ฎ๐ฌ๐ž๐ ๐ข๐ง ๐œ๐จ๐ฆ๐ฉ๐š๐ง๐ฒ ๐›๐ซ๐š๐ง๐๐ข๐ง๐ . ๐“๐ก๐ž ๐ซ๐จ๐ฅ๐ฅ๐จ๐ฎ๐ญ ๐ฐ๐ข๐ฅ๐ฅ ๐œ๐จ๐ง๐œ๐ฅ๐ฎ๐๐ž ๐›๐ฒ ๐ฅ๐š๐ญ๐ž ๐๐จ๐ฏ๐ž๐ฆ๐›๐ž๐ซ ๐Ÿ๐ŸŽ๐Ÿ๐Ÿ”.

The affected properties include position (and related properties like top, left, and z-index), margin, transform, opacity, overflow, filter, and others. If your branding relies on these properties to control the placement or appearance of elements, expect changes once support is removed.

๐Ÿ‘‰๐ŸปYour logos, images, and text will continue to appear, but they may revert to their default placement.

๐Ÿ‘‰๐ŸปThe major thing is that there is also no replacement or migration path for these retired properties!

๐Ÿ‘‰๐ŸปThis change only affects organizations currently using custom CSS for company branding. New Microsoft Entra tenants created after January 5, 2026 can’t use custom CSS for branding, and Entra External ID tenants aren’t affected.

The rationale aligns with Microsoft’s Secure Future Initiative (SFI). Fine-grained CSS positioning can be misused to create deceptive sign-in page layouts that closely resemble legitimate branded experiences. Removing support for these positioning properties helps strengthen phishing resistance while preserving core branding capabilities.

Before the deadline, I recommend taking time to:

โœ… Pull your current branding configuration through Graph Explorer and review every branding localization for deprecated CSS properties.
โœ… Remove any dependencies on the retired properties and redesign the branding where necessary.
โœ… Validate the sign-in experience after the changes to ensure the layout still appears as expected.

The long rollout window gives admins enough runway to prepare, and it’s a reasonable moment to simplify branding customizations while aligning with where Microsoft is heading on phishing-resistant sign-in experiences.

About the retired CSS properties and Microsoft’s recommendations in the official documentation.
https://lnkd.in/eTq6brfZ

Write a Comment

Leave a Comment

Your email address will not be published. Required fields are marked *

Subscribe to Newsletter

Subscribe to our email newsletter to get the latest posts delivered right to your email.
Powered by Amail.