Custom Branding
Training Guide
Learn how to fully customize the look and feel of Secret Server — from login pages and splash announcements to logos, color schemes, and more.
Overview & Initial Setup
Understand what Secret Server branding covers and where to find the settings in your instance.
Login Page
Custom logo, background image, organization name, and announcement message on the sign-in screen.
Application Header
Replace the default Delinea logo in the top navigation bar with your company's logo and branding.
Color Themes
Customize primary, accent, and UI element colors to match your organization's brand guidelines.
Splash Announcements
Mandatory read banners or dismissible notices shown at login or on first access after updates.
Favicon & Tab Title
Upload a custom favicon (.ico) and set the browser tab title to reflect your organization.
Email Templates
Customize the logo, header colors, and footer text in automated notification emails.
🗺️ Where to Find Branding Settings
Log in as an Administrator
Branding changes require the Administer Configuration role permission. Log in with your admin account.
Navigate to Admin Panel
Click the Admin menu in the top navigation bar.
Open the Login tab
Within Configuration, select the Login tab to access all login-page and branding settings.
Locate the Customization section
Scroll down within the Login tab to find the User Interface Customization section — this houses logo uploads, color pickers, and the announcement editor.
Permissions Required
Understand which roles and permissions are needed to manage branding settings.
📋 Required Role Permissions
| Permission | What It Allows | Default Role |
|---|---|---|
| Administer Configuration | Access all branding settings including logos, colors, login page, and announcements | System Administrator |
| View Configuration | Read-only access to view branding settings without ability to save changes | Administrator |
| Administer Users | Required for managing announcement targets (specific groups or all users) | System Administrator |
| Standard User | Cannot access branding settings; only sees applied branding | User |
🔧 Granting Branding Permissions
Navigate to Role Management
Select or Create a Role
Either edit an existing role (e.g., "Branding Admin") or create a new one specifically for branding management.
Add the Required Permission
Check the Administer Configuration permission box and save the role.
Assign Role to User
Go to the target user's profile, click Roles, and assign the updated or new role.
Login Page Customization
Customize the first thing your users see — the sign-in screen — with your organization's branding.
🎨 Interactive Preview
Use the controls below to experiment with login page settings in real time.
⚙️ Live Customizer
📍 Navigation Path
📐 Customizable Login Elements
| Setting | Description | Format / Constraints |
|---|---|---|
| Login Logo | Logo displayed in the banner area at the top of the login form | PNG / JPG · Max 200px height · Transparent PNG recommended |
| Login Background Image | Full-bleed background image behind the login card | JPG/PNG · Min 1920×1080 · Max 2MB · Landscape orientation |
| Organization Name | Displayed below the logo in the banner header area | Text · Max 64 characters |
| Banner Background Color | Background color of the logo/org name banner strip | Hex color value (e.g., #1a2540) |
| Login Button Color | Background color of the primary Sign In button | Hex color value |
| Login Announcement | Text block shown below the login form (legal notices, warnings, etc.) | Plain text or HTML · Max 1000 chars |
| Custom CSS (Advanced) | Inject custom CSS directly into the login page for advanced styling | Valid CSS · Requires code review before production use |
Logos & Icons
Upload and manage logos used across the application header, login page, and email notifications.
📍 Logo Placement Locations
Application Header Logo
Displayed in the top-left of the main navigation bar. Replaces the Delinea logo throughout the app.
Login Page Logo
Shown in the banner of the login form. This is the first branded element users see.
Email Header Logo
Appears in automated email notifications (password expiry, approvals, etc.).
Favicon
The tiny icon shown in the browser tab and bookmarks bar.
⬆️ Uploading a Logo — Step by Step
Prepare your logo file
Export a PNG with a transparent background. For the header, aim for 160×40px. Ensure the file is under 500KB.
Go to Configuration → Login
Locate User Interface Customization
Scroll to the User Interface Customization section. You will see fields for Login Logo and Application Logo.
Click Choose File and Upload
Select your prepared PNG. A preview will appear. Verify it looks correct before saving.
Save and verify
Click Save at the bottom of the page. Open a new browser tab (or incognito window) and confirm the logo appears correctly on both the login page and application header.
📋 Logo File Requirements
| Logo Type | Recommended Size | Format | Max File Size | Notes |
|---|---|---|---|---|
| App Header | 160 × 40 px | PNG (transparent) | 500 KB | Used in top nav bar |
| Login Banner | Up to 200px wide | PNG (transparent) | 500 KB | Displayed above sign-in form |
| Email Header | 200 × 60 px | PNG or JPG | 200 KB | Must display on white background |
| Favicon | 32 × 32 or 64 × 64 px | ICO or PNG | 50 KB | Browser tab icon |
Colors & Themes
Set primary and accent colors, button styles, and link colors to match your organization's brand guidelines.
🎨 Default Delinea Color Palette
These are the out-of-the-box colors. You can override the primary and accent values.
⚙️ Customizable Color Settings
| Setting | Description | Where It Appears |
|---|---|---|
| Primary Color | Main brand color — buttons, links, active states | Navigation, Buttons, Links throughout app |
| Navigation Background | Background color of the top navigation bar | App header strip |
| Login Banner Background | Background behind your logo on the login page | Login page header |
| Login Button Color | Color of the Sign In button | Login page only |
| Link Color | Color for inline hyperlinks across the interface | All pages throughout app |
| Custom CSS | Full CSS overrides for advanced color theming | All UI elements |
🏢 Corporate Branding Examples
📝 Applying Colors via Custom CSS
For advanced theming, inject CSS variables that override Delinea's defaults:
Splash Announcements
Create mandatory-read or informational banners displayed to users at login or on their first session of the day.
📋 Announcement Types
Login Announcement
Static text block displayed on the login page below the sign-in form. No user acknowledgment required.
Splash Screen (Banner)
Modal popup shown after login — requires users to click "Acknowledge" before proceeding. Ideal for mandatory security policies.
Dismissible Notice
A non-blocking notice bar shown at the top of the interface that users can dismiss. Good for maintenance windows or updates.
🛠️ Building an Announcement — Interactive Builder
✏️ Announcement Builder
📍 Where to Configure
Navigate to Login Announcement settings
Enable the announcement
Toggle Enable Login Announcement to ON. The text editor will appear.
Enter your message
Type or paste your announcement. HTML is supported (bold, links, line breaks). Keep messages concise — users will see this at every login unless configured otherwise.
Configure acknowledgment (Splash Screen)
To require users to click Acknowledge before proceeding, enable Require Users to Acknowledge. Users who haven't acknowledged will be blocked until they do.
Save and test
Save settings and log in as a test user to verify the announcement appears correctly and the acknowledgment workflow works as expected.
<b> for bold,
<br> for line breaks,
and <a href="..."> for links.
Avoid complex formatting — keep it readable.
Apply & Publish Branding
How to save, apply, and verify your branding changes — and how to safely roll back if something goes wrong.
✅ Save & Apply Process
Make all branding changes in one session
Navigate to Admin → Configuration → Login and make all your changes (logos, colors, announcement) before saving. Each save triggers a UI refresh for all users.
Click Save at the bottom of the page
Scroll to the bottom of the Configuration → Login page and click the Save button. Changes take effect immediately.
Test in an incognito/private window
Open a fresh incognito browser session and navigate to your Secret Server URL. Verify the login page looks correct before notifying users.
Test with a non-admin user account
Log in as a regular user to confirm the branded experience is correct across the full interface, not just the login page.
Document your settings
Save a record of all hex color codes, logo file names, and announcement text in your internal knowledge base or IT documentation system for future reference.
↩️ Rolling Back Branding
Restore Default Logos
On the Configuration → Login page, each logo field has a Restore Default link that removes your uploaded logo and restores the Delinea default instantly.
Manual Color Reset
Clear any custom color hex values in the branding fields and leave them blank to revert to system defaults. Then save the form.
Clear Custom CSS
Navigate to the Custom CSS field, delete all content, and save. The interface will revert to default Delinea styling.
Disable Announcement
Toggle the Enable Login Announcement switch to OFF and save to immediately remove the announcement from the login page.
🔄 Change Management Best Practices
Pre-Launch Checklist
Click each item to mark it complete. Track your readiness before going live with custom branding.
🖼️ Logos & Assets
- Application header logo uploaded (PNG, transparent background, 160×40px)
- Login page logo uploaded and verified in incognito browser
- Favicon uploaded (.ico format, 32×32px or 64×64px)
- Email header logo uploaded and tested by sending a test notification
🎨 Colors & Theme
- Primary brand color configured and matches company branding guidelines
- Navigation background color set and verified
- Login banner background color set to match brand
- Color contrast ratio verified (minimum 4.5:1 for WCAG AA compliance)
- Custom CSS tested after latest Secret Server upgrade (if applicable)
📢 Announcements
- Login announcement content reviewed and approved by security/legal team
- Acknowledgment requirement decision made (required vs. optional)
- Announcement tested as a non-admin user in a staging instance
🚀 Final Verification
- All settings verified in incognito/private browser window
- Verified in mobile browser (login page and main interface)
- All hex color values, logo file names, and text documented in internal IT wiki
- Rollback plan documented and team notified
- User communication sent (if visible changes are going live)