Ubisecure SSO includes several login screens that can be customized using the methods described in this page. The login screens are not visually customized separately but they are still described briefly in this page because they are also present in the CSS design package and the texts are screen specific. The screenshots include the text customization keys in place of the actual default texts.

Jump to a specific login screen by clicking a link:

Menu screen

The menu screen is the default starting screen of the sign in process. By default it contains an Intro box, Help box and depending on the authentication methods available it will also contain either a Login box or an External box.
Parameterized fields:

• MENU_INTRO_TEXT
  • {0} → url (host) of the service the user is trying to access
  • NOTE: This field is used by default
• MENU_INTRO2_TEXT
  • {0} → url (host) of the service the user is trying to access
  • {1} → name of the service the user is trying to access (Client name is read from agent metadata – OAuth2/SAML2)
  • NOTE: This field is used only if agent metadata contains client name. For OAuth2 agents, the name is set in the client_name value of the metadata. For SAML2 agents, the name is set in the mdui:DisplayName value of the metadata.

StepUp screen

The step-up screen is used for selecting a suitable authentication method when the normal password authentication method is not strong enough for the service in question.

OTP screen

The OTP screen is used for giving the one-time password from the OTP list when using the OTP authentication method.
Parameterized fields:

• OTP_LOGIN_SEQUENCE
  • {0} → Identifier of the requested one-time password
• OTP_LOGIN_SEQUENCE_NAME
  • {0} → Identifier of the currently active OTP list
• OTP_LOGIN_NEXT_SEQUENCE_NAME
  • {0} → Identifer of the currently passive OTP list
• OTP_LOGIN_REMAINING_PASSWORD_AMOUNT
  • {0] → Number of remaining one-time password in the active OTP list

OTP expiring screen

The OTP Expring screen is used when user logs in with a One-time Password which is expiring.

OTP print screen

The OTP Print screen is used for printing and activating new One-time Password lists.
Parameterized fields:

• OTP_PRINT_LIST_TEXT
  • {0} → OTP List ID

Parameterized fields:

• OTP_PRINT_LIST_CLOSE
  • {0} → Close

SMS screen

The SMS screen is used for giving the one-time password sent to the user's mobile phone when using the SMS OTP authentication method.

SMS unregistered screen – insert phone number

The SMS screen is used for giving the one-time password sent to the user's mobile phone when using the SMS OTP authentication method.

 SMTP unregistered screen – insert phone email

The SMTP screen is used for giving the one-time password sent to the user's mobile phone when using the SMTP OTP authentication method.

 Password screen

The password screen may also be a starting screen of the sign in process. It is used as the starting screen when only the password authentication method is available.

• PASSWORD_INTRO_TEXT
  • {0} → url of the service the user is trying to access
• PASSWORD_INTRO2_TEXT
  • {0} → url (host) of the service the user is trying to access
  • {1} → name of the service the user is trying to access (Client name is read from agent metadata – oAuth2/SAML2)
• NOTE: This field is used only if agent metadata contains client name metadata

Password expiring screen

The password expiring screen is used for giving the user the opportunity to change the password that will expire in the near future.

 Password expired screen

The password expired screen is used for forcing the user to change a password that has been expired before giving the user access to the requested service.

ETSI MSS Mobile PKI unregistered screen

The unregistered mobile PKI screen is used for asking user's mobile phone number and spam prevention code are requested for MPKI authentication.

Note that "MPKI_LOGIN_TEXT_NOSPAMCODE" is used instead of "MPKI_LOGIN_TEXT" if first login without spamcode has failed – when method configuration parameter "spamcode_required" is set to "false". In that case also the spamcode is not asked, and the text field "MPKI_UNREGISTERED_NOSPAMCODE" is not used/visible.

Possible error messages:

• LOGIN_CANCEL: User cancelled the authentication on the mobile phone.
• LOGIN_EXPIRED: Authentication wasn't finished during the timeout period, which is set in configuration parameter ae.timeout.
• INVALID_CREDENTIALS: Given spam prevention code is not correct.
• USER_NOT_FOUND: Given phone number is not valid.
• EXTERNAL_FAILURE: Unexpected failure occurs.

ETSI MSS Mobile PKI unregistered wait screen

Used when user has entered mobile phone number and spam prevention code, and MPKI authentication is to be waited for.
Parameterized fields:

• MPKI_LOGIN_WAIT_TEXT
  • {0} → Progress in percents when waiting for mpki authentication

Consent screen

Consent Screen can be shown if user consent is required for releasing user attributes to third party IdP.
Parameterized fields:

• CONSENT_INTRO_TEXT
  • {0} → Name of the service the user is trying to access

Passive consent screen

Passive Consent Screen is shown for 5 seconds when authentication request coming from third party IdP specifies that no user interaction is required. User is shown informative text.
Relevant keys are:

• CONSENT_PASSIVE_INTRO_TITLE
• CONSENT_PASSIVE_INTRO_TEXT
• CONSENT_PASSIVE_LOGIN_TITLE
• CONSENT_PASSIVE_LOGIN_TEXT

CONSENT_PASSIVE_INTRO_TEXT may use parameter {0}, which would be replaced with the name of the requested service.

Proxy screen

The proxy screen is used as a backup when making an automated redirection to the authentication provider. The redirection can be made manually from this screen.

Error screen

The error screen is used for informing the user of certain kinds of errors that mean that the authentication process cannot be continued. In some cases the error screen may automatically redirect to the service if the error can also be transmitted to the service.

Exit screen

The exit screen is used as a backup when making an automated redirection to the service without a successful authentication. The redirection can be made manually from this screen.

Success screen

The success screen is used as a backup when making an automated redirection to the service after a successful authentication has been performed. By the default this screen is shown very briefly and does not required that the user presses continue. The redirection can be made manually from this screen.

 Generally users are transferred to service automatically by using javascript. In some cases it maybe desirable to show further instructions or usage policies and require user to click a button. Please refer to page Templates - SSO.

Landing page screen

The landing page screen is used when a request has been made to the authentication server out of context. Usually this means that the user does not have a valid session to which the request would belong to.

Logout screen

The logout screen is used for informing the user of the status of the logout procedure.

Logout error

The logout error screen is displayed in the event of single logout failure. If backchannel logout was used, the URLs of the applications that did not respond or rejected the logout request are listed on the screen to warn the user of logout failure. An example is that the application has stopped responding. In these cases the user should be instructed to close all browser windows to terminate any possible application sessions. LOGOUT_ERROR_HELP_TITLE = Help
LOGOUT_ERROR_HELP_TEXT = Single logout was not completed successfully. Please logout manually from all individual applications and close all browser windows.
LOGOUT_ERROR_HELP_LINKS =
LOGOUT_ERROR_LOGIN_TITLE = Logout failed
LOGOUT_ERROR_LOGIN_TEXT = Could not complete logout.  

Accept terms

This screen will appear if the user has not accepted the current Terms of Use. The user cannot proceed until the checkbox is selected and the next button is pressed.
ACCEPT_TERMS_HELP_TITLE = Help
ACCEPT_TERMS_HELP_TEXT = You must accept Terms of Use before continuing.
ACCEPT_TERMS_HELP_LINKS =
ACCEPT_TERMS_TITLE = Accept terms
ACCEPT_TERMS_TEXT = Accept Terms of Use.
ACCEPT_TERMS_CHECKBOX_TITLE = Accept Terms of Use
ACCEPT_TERMS_NEXT = Continue