Microsoft has withdrawn support for CSS layout and positioning properties used in company branding Microsoft Login ID. The decision, announced through the Message Center advisory MC1458474is part of the Secure Future Initiative, the program with which the Redmond company has long been reorganizing its security priorities on digital identity.
The problem identified by Microsoft concerns precisely the flexibility of those CSS rules. Property as position, margin, transform, opacity And overflow they allowed you to move logos, overlay banners or alter the standard arrangement of elements on the login page. The same functions, however, lent themselves to building cloned or misleading login interfaces, useful to those who organize phishing campaigns against company employees.
The restriction does not erase company branding: logos, colors and custom texts remain visible. However, their arrangement changes, which now always follows the default layout imposed by Microsoft, regardless of the CSS that an organization had configured in the past.
Who gets involved and what they have to do
Microsoft had already locked the door to the problem last year July 21stdate from which Login ID tenants can no longer activate new configurations based on these CSS properties. Anyone who was not already using them on that date will not suffer any consequences with today’s withdrawal.
For organizations that had invested in a custom login, the instructions given to administrators were clear: download the existing CSS file from the Custom branding panel, check which rules depend on the properties being retired, fix or remove those parts, and test the branded login pages before the deadline. A useful step also to warn internal support teams in advance, who otherwise would have found themselves managing user reports on a “different than usual” interface.
Microsoft specifies that this intervention is only the first step towards a Wider scaling of custom CSS on Login IDwith the declared objective of eliminating it completely during 2027. Before that goal the company promises a period of notice and indications on migration paths, as well as new customization options designed however without the margins of maneuver that are closed today.
It is not certain that this forced centralization of the layout coexists well with the brand identity needs of large companies, which often demand access pages that are consistent with the rest of their digital presence. Microsoft is betting that security is worth more than a perfectly aligned logo, but the real test will be the reaction of IT departments forced to review configurations that have perhaps been active for years.
