Identity Cloud hosted pages
Identity Cloud hosts default web pages (known as hosted pages) that you can use in end-user journeys. Hosted pages support localization, and have customizable themes. The pages are designed to help you quickly create and test common user self-service operations.
For example, the default login journey starts with a sign-in page for capturing username and password. The journey ends with the end-user’s profile page.
Types of hosted pages
There are two types of hosted pages:
-
Hosted journey pages. Hosted pages for end user login journeys.
-
Hosted account pages Hosted pages for end user account management, shown after a login journey.
Activate or deactivate hosted pages
Activate or deactivate hosted account pages
To prevent exposing information contained in the default end-user profile, you can deactivate the profile’s hosted page. You can then use the ForgeRock SDKs or your own APIs to create and host your own custom web pages.
When you deactivate the hosted pages option, Identity Cloud displays the following web page to unauthorized users:
After you deactivate the default end-user profile, you can still use the hosted end-user journey UI, while denying unauthorized access to end-user profiles. Your customers manage only their own profiles, or delegate administration, using your application.
Afterwards, all hosted pages associated with your tenant are deactivated.
-
In the Identity Cloud admin UI, open the Tenant menu, and go to Tenant Settings > Global Settings.
-
Click End User UI.
-
On the End User UI page, do one of the following:
-
To activate hosted pages, beside Hosted Account Pages, click Activate. The Global Settings toggle displays the status as Active.
-
To deactivate hosted pages, beside Hosted Account Pages, click Deactivate. The Global Settings toggle displays the status as Inactive.
-
The change takes effect immediately.
|
When you deactivate hosted pages, all hosted pages associated with your tenant are deactivated. |
Activate or deactivate journeys
To prevent users from viewing sensitive information that may appear in generated login, registration, password reset pages, you can deactivate the default journey. This prevents a user from navigating to the default administrator login journey.
Afterwards, the journey is no longer visible in the tenant UI.
When you deactivate the default journey, Identity Cloud displays the following web page to a user that attempts to navigate to alpha or bravo realm journey:
After you deactivate the default journey, you can still administer the tenant environment while preventing unauthorized access to default journey information.
-
In the Identity Cloud admin UI, open the Tenant menu, and go to Tenant Settings > Global Settings.
-
Click End User UI.
-
On the End User UI page, do one of the following:
-
To activate the default journey, beside Hosted Journey Pages, click Activate. The Global Settings toggle displays the status as Active.
-
To deactivate the default journey, beside Hosted Journey Pages, click Deactivate. The Global Settings toggle displays the status as Inactive.
-
For an explanation about how hosted pages integrate with the default journey, refer to the Journeys page.