Microsoft Entra ID: Retirement of custom CSS layout and positioning properties in company branding

Microsoft Entra ID will retire custom CSS layout and positioning properties in company branding by late October 2026 to enhance security and reduce phishing risks. Organizations using these properties must update branding configurations before then; new use will be blocked from July 21, 2026. Branding will revert to default layouts after retirement.

[What and why]

Action required only for organizations that use custom CSS layout and positioning properties. Organizations that were not using Custom CSS as of July 21, 2026, are not affected and cannot begin using it going forward. Microsoft Entra External ID tenants are not affected by this change.

You're receiving this notification because you're associated with one or more Azure subscriptions that currently use Microsoft Entra ID.

As previously communicated in MC1435782, Microsoft is updating Microsoft Entra ID company branding to enhance the security of branded sign-in experiences. To support Microsoft's Secure Future Initiative (SFI) and strengthen protection against phishing attacks, Microsoft Entra ID will retire support for custom CSS layout and positioning properties used in company branding beginning late October 2026.

This change helps deliver more secure, reliable, and consistent sign-in experiences while continuing to support branding customization. By limiting the use of layout and positioning modifications that can alter the appearance of sign-in pages, Microsoft is reducing opportunities for deceptive or misleading sign-in experiences.

Note that since the previous update in MC1435782, we are retiring an additional set of properties to further secure your branded sign-in experience and harden against phishing risk. These properties will be retired by late October 2026 and may require you to take action if they are used in your configuration. 

[Rollout schedule]

• July 21, 2026: Organizations that are not already using these custom CSS properties can no longer begin using them in Microsoft Entra ID custom branding configurations.
• Late October 2026: Microsoft Entra ID will retire custom CSS layout and positioning properties globally.
• Later in 2027: Microsoft Entra plans to move towards full custom CSS retirement, with advance notice provided.

[Impact on your organization]

Who is affected

• Administrators who manage Microsoft Entra ID custom branding (including Company branding and Branding themes)
• Organizations that currently use custom CSS layout and positioning properties in custom branding configurations

Platforms and services

• Microsoft Entra ID
• Company branding
• Branding themes
• Web-based branded sign-in experiences

What will happen

• Beginning July 21, 2026, Microsoft Entra ID will no longer allow new use of custom CSS in custom branding configurations.
• Existing branding customizations that use the retired properties will continue to work until October 26, 2026.
• After late October 2026, Microsoft Entra ID will no longer honor the retired CSS layout and positioning properties.
• Branding elements will remain visible but will revert to their default placement and presentation.
• Branding configurations that depend on the retired properties may display differently after the retirement takes effect.

The following CSS properties are being retired:

• offset
• offset-path
• offset-distance
• margin-block
• margin-block-start
• margin-block-end
• margin-inline
• margin-inline-start
• margin-inline-end
• order
• grid-area
• grid-column
• grid-column-start
• grid-column-end
• grid-row
• grid-row-start
• grid-row-end
• isolation
• overflow-x
• overflow-y
• overflow-block
• overflow-inline
• content-visibility
• clip
• mask
• mask-image
• -webkit-mask
• -webkit-mask-image

[Action required and recommendations]

If your organization uses any of the retired CSS properties listed above, action is required before October 26, 2026.

Recommended actions:

• Review Microsoft Entra ID company branding configurations.
• To download your existing custom CSS file, navigate to the Custom branding blade in the Entra Admin Center. Then, click Edit > Layout > Custom CSS > Download.
• Identify any branding customizations that rely on the retired CSS properties.
• Remove or redesign customizations that depend on these properties.
• Test branded sign-in experiences to ensure they display as expected after the retirement date.
• Communicate any planned branding updates to internal stakeholders as needed.

Learn more

• Deprecation of custom CSS positioning properties - CSS template reference guide | Fundamentals | Microsoft Entra | Microsoft Learn
• Configure your company branding | Fundamentals | Microsoft Entra | Microsoft Learn
• Customize the sign-in experience for your application with branding themes | Fundamentals | Microsoft Entra | Microsoft Learn
• Microsoft Entra ID enhances security of branded sign-ins | Microsoft Entra Blog 
• Microsoft Secure Future Initiative (SFI)

[Compliance considerations]

No compliance considerations identified. Review as appropriate for your organization.