Hosted Pages Management

Overview

cidaas Hosted Pages are pre-built, customizable web pages provided by cidaas for user interactions such as login, registration, password management, and consent. These pages handle authentication and authorization, decoupling your applications from user management responsibilities.

Key Advantage: Your cidaas instance includes all hosted pages by default—you can start using cidaas immediately without any development effort.

Core Flexibility: Each hosted page has a pluggable URL field that allows you to use cidaas default pages or easily "plugin" your own custom page URLs. This means you can provide your own complete page set while maintaining full integration with cidaas authentication infrastructure—simply by updating the URL configuration.

cidaas implements a flexible hosted pages system that supports multiple page groups, themes, and translations, ensuring consistent and customizable user experiences across all applications.

Why Use Hosted Pages

• Business Benefits
  • No-Code Implementation - Deploy standard authentication flows instantly.
  • Brand Consistency - Customize style, colors, and layout to match your brand
  • Multi-Application Support - Apply one configuration across multiple apps
  • Reduced Development Time - Pre-built, secure pages ready to use
• Technical Benefits
  • Secure Backend - Built-in security and best practices
  • Multi-Language Support - Internationalization out of the box
  • Fully Customizable Fields - Adapt forms to your requirements
  • App-Level Features - MFA, progressive profiling, social login providers
• Operational Benefits
  • Easy Configuration - Manage through cidaas Admin UI
  • Quick Updates - Change once, apply everywhere
  • Custom Domain Support - Use your own branded URLs
  • Flexible Customization - From simple styling to complete custom implementation

How Hosted Pages Work

Hosted Pages are organized into Hosted Pages Groups, which are collections of related pages assigned to specific applications.

Key Concepts:

• Hosted Page - Individual page (login, registration, etc.)
• Hosted Pages Group - Collection of related pages
• App - Your application that uses the hosted pages

Hosted Page Structure: Pluggable URLs

The core flexibility of cidaas Hosted Pages lies in the URL field of each hosted page. This field allows you to "plugin" your own custom page URLs, making it easy to provide your own page set while leveraging cidaas authentication infrastructure.

How it works:

Each hosted page in a group has a URL setting that determines where the page is served from:

• Default cidaas URLs: Use pre-built cidaas pages (e.g., https://your-domain.cidaas.de/identity/login)
• Custom URLs: Plug in your own page URLs (e.g., https://accounts.mycompany.com/login or https://myapp.com/auth/login)

Benefits of pluggable URLs:

• Use Default Pages: Start immediately with cidaas pre-built pages—no development required
• Custom Page Sets: Replace any page with your own custom implementation by simply updating the URL
• Hybrid Approach: Mix default and custom pages—use cidaas pages for some flows, your own for others
• Easy Migration: Switch between default and custom pages by changing the URL—no code changes needed
• Brand Control: Host pages on your own domain while maintaining full integration with cidaas

Example Structure:

Hosted Pages Group: "My Custom Pages"
├── login → URL: https://mycompany.com/auth/login (custom)
├── register → URL: https://mycompany.com/auth/register (custom)
├── password_forgot_init → URL: https://your-domain.cidaas.de/identity/password_forgot_init (default)
└── mfa_required → URL: https://mycompany.com/auth/mfa (custom)

This structure allows you to:

1. Start simple: Use all default cidaas pages initially
2. Customize gradually: Replace pages one by one with your own implementations
3. Maintain flexibility: Switch back to defaults or try different custom pages anytime
4. Control branding: Host critical pages (like login) on your domain while using defaults for less visible pages

Key Insight
The URL field is the "plugin point" that connects cidaas authentication flows to your page implementations. Whether you use cidaas default pages or your own custom pages, the integration remains the same—just update the URL.

Multi-Brand Example

Different applications can use different hosted page groups for tailored user experiences:

Pre-Packaged Hosted Pages

Your cidaas instance already contains all hosted pages by default, so you can use cidaas right away

Prerequisites

Before managing hosted pages in cidaas, ensure the following:

• Access to the cidaas Admin UI with Hosted Pages Management permissions.
• Understanding of your application's authentication flow requirements.
• Custom URLs prepared (if using custom hosted pages instead of default cidaas pages).
• Theme CSS files ready (if creating custom themes).
• Translation JSON files prepared (if adding custom language support).
• Hosted page group names and identifiers planned.

Key benefits

1. No-code implementation - Deploy standard authentication flows instantly without development effort.
2. Centralized management - Configure once and apply across multiple applications.
3. Brand consistency - Customize visual appearance to match your brand identity.
4. Multi-language support - Provide localized experiences for global users.
5. Flexible customization - From simple styling to complete custom page implementations.

Note
Hosted page groups define the collection of pages used during authentication flows. Each application can be assigned one hosted page group, which determines the URLs and styling for login, registration, and other user interactions.

Hosted Page Group Details

---

Setting	Description	More information
Group ID	Unique identifier for the hosted page group.	–
Group Owner	Owner type: admin, client, or system.	–
Default Locale	Default language/locale (e.g., en-US, de-DE).	Translation Guide
Hosted Pages	Array of individual hosted pages in the group.	See hosted page types
Created Time	Timestamp when the group was created.	–
Updated Time	Timestamp when the group was last modified.	–

---

Hosted Page Types

---

Page Type	Description
login	User login page with authentication options.
register	User registration page for new account creation.
login_success	Page displayed after successful login.
register_success	Page displayed after successful registration.
register_additional_info	Progressive profiling page for additional user information.
password_forgot_init	Password reset initiation page.
password_set	Page for setting a new password.
password_set_success	Confirmation page after password change.
verification_init	Page to initiate identity verification.
verification_complete	Page displayed after verification completion.
reactivate_verification_method	Page for reactivating verification methods.
mfa_required	Multi-factor authentication selection page.
consent_preview	Preview page for consent requests.
consent_scopes	Page displaying requested scopes for consent.
logout_success	Page displayed after successful logout.
account_deduplication	Page for handling duplicate account scenarios.
error	Error page displayed for authentication failures.

---

Hosted Page Settings

Setting	Description
Hosted Page ID	Unique identifier for the page type (e.g., login, register).
Locale	Language/locale code (e.g., en-US, de-DE, fr-FR).
URL	The pluggable URL where the hosted page is served. This is the key customization point—you can use default cidaas URLs (e.g., https://your-domain.cidaas.de/identity/login) or plug in your own custom page URLs (e.g., https://mycompany.com/auth/login). This allows you to easily provide your own page set while maintaining full integration with cidaas authentication flows.
Group ID	The hosted page group this page belongs to.

---

Theme Settings

Setting	Description
Theme Filename	Name of the CSS theme file (e.g., custom.css).
Theme Variables	CSS custom properties prefixed with --cid-.
Typography Settings	Font family, sizes, and colors.
Color Palette	Primary, accent, and background colors.
Spacing and Layout	Padding, margins, and boundary box settings.
Border and Shadow	Border styles and shadow effects.

For complete theme variable reference, see Theming Guide.

---

Translation Settings

Setting	Description
Locale ID	Language/locale identifier (e.g., en, de, fr).
Translation Type	bundled (English/German) or custom (other languages).
Translation Keys	JSON structure with all translatable strings.
Placeholder Names	Keys that should not be modified (e.g., {{variable}}).

For detailed translation information, see Translation Guide.

---

Advanced Configuration

Category	Description	More information
Default Hosted Pages Group	Pre-built group with all standard pages ready to use.	See Getting Started section
Custom Hosted Pages Group	Create groups with custom URLs pointing to your own domain.	See How to Create a Hosted Pages Group section
Dynamic Domain Resolution	Use domain placeholders for flexible URL configuration.	See Dynamic Domain Resolution section
Theme Management	Upload, manage, and apply CSS themes for visual customization.	Theming Guide
Translation Management	Add and manage translations for multiple locales.	Translation Guide
Locale Resolution	Configure how locales are determined (query param, Accept-Language header).	Translation Guide
App Mapping	Assign hosted page groups to applications.	See How to Map Hosted Pages to an App section
Custom Domain Support	Configure custom domains for hosted page URLs.	See Dynamic Domain Resolution section

---

Technical Integration

cidaas provides comprehensive REST APIs for managing hosted pages, themes, and translations programmatically. All APIs are documented in the Hosted Pages API Reference.

Hosted Pages Groups

API	Description	Link
Create/Update Group	Creates a new hosted page group or updates an existing one.	View API
List Groups	Retrieves all hosted page groups with optional filtering.	View API
Get Group by ID	Retrieves a specific hosted page group.	View API
Delete Group	Deletes a hosted page group.	View API

Individual Hosted Pages

API	Description	Link
Add/Update Page	Adds or updates a hosted page in a group.	View API
Get Page	Retrieves a specific hosted page with locale support.	View API
Delete Page	Removes a hosted page from a group.	View API

Theme Management

API	Description	Link
Upload Theme	Uploads a new theme CSS file.	View API
List Themes	Retrieves all available themes.	View API
Get Theme by Filename	Retrieves a specific theme file.	View API
Delete Theme	Deletes a theme file.	View API

Translation Management

API	Description	Link
Create Translation	Creates a new translation for a locale.	Available via API (see Translation Guide)
List Translations	Retrieves all translations.	Available via API (see Translation Guide)
Get Translation	Retrieves a specific translation by locale ID.	Available via API (see Translation Guide)
Update Translation	Updates an existing translation.	Available via API (see Translation Guide)
Delete Translation	Removes a translation.	Available via API (see Translation Guide)

API Authentication

All hosted pages APIs require OAuth2 authentication with the following scopes:

• cidaas:hosted_pages_read - Read access for hosted pages groups
• cidaas:hosted_pages_write - Write access for hosted pages groups
• cidaas:hosted_pages_delete - Delete access for hosted pages groups
• cidaas:theme_read - Read access to themes
• cidaas:theme_write - Write access to themes
• cidaas:theme_delete - Delete access to themes

---

Getting Started with Hosted Pages

To get started with hosted pages:

1. Explore available pages: Review all available Hosted Pages in the "Default" or Standard Hosted Pages Group offered by cidaas.
2. Set up your Application: Create an app using the cidaas admin UI and select the appropriate "Hosted Pages Group".
3. Customize if needed: Use the default pages or create your own Hosted Pages Group with custom URLs for Login, Register, etc.

How to Create a Hosted Pages Group

Create your own hosted pages group by copying from the default cidaas hosted pages or building custom URLs.

1. Log in to your cidaas Admin dashboard.

2. Navigate to Hosted Pages.

3. Click Create Hosted Pages Group.

4. Fill in the Hosted Pages Group details.

5. Click Create.

   • Your new hosted pages group will appear in the Group Name dropdown menu under the Hosted Pages tab.

6. Select your newly created Hosted Pages Group from the dropdown

7. Navigate to the Locale tab to view all available hosted pages

8. Click on the desired hosted page to edit it

9. Enter your custom hosted page URL or use the default cidaas URL

10. Click Update to save your changes

How to Map Hosted Pages to an App

Once you've created and configured your hosted pages group, assign it to your application.

1. Log in to your cidaas Admin dashboard
2. Navigate to Apps > App Settings
3. Select your app and click Edit
4. Locate the Hosted Pages Group dropdown under App settings.
5. Select your custom Hosted Pages Group

Your Hosted Pages Group is now mapped to your app and will be used for all authentication flows.

Dynamic Domain Resolution

The default Hosted Pages of cidaas support custom domains, which you shall apply in your cidaas instance, to provide hosted page URLs which may serve with different URLs like https://accounts.mycompany.com, https://accounts.mysecondbrand.io. This technique can also be simply used for custom hosted pages using the domain placeholder {{cidaas_base_url}}:

https://{{cidaas_base_url}}/login where for instance the cidaas_base_url gets replaced by accounts.mycompany.com

Available Hosted Pages

Here is a list of available cidaas hosted pages:

• Registration page: The registration hosted page enables new users to create accounts by collecting required information and granting service access.
• Login and Logout page: Login and logout confirmation pages inform users that their action was successful and provide guidance on what to do next.
• Additional information page for registration: The registration hosted page for entering additional registration information prompts users to provide further required details to complete their account setup.
• MFA page: An MFA (Multi-Factor Authentication) Required Page informs users that additional verification is needed for security. It typically includes: Instructions to enter a one-time passcode (OTP) sent via email, SMS, or an authenticator app.
• Verification page: Verification pages guide users to complete identity verification with a confirmation code and confirm successful account activation.
• Account de-duplication info page: An account deduplication page helps users identify duplicate accounts and decide whether to merge them or remove one.
• Password page: The password reset pages guide users through the complete recovery process: initiating reset with their email or username, creating a new password, and confirming successful password update with a redirect to login.
• Consent page: Consent pages display requested permissions with detailed information about data access and functions, allowing users to review and grant or decline specific permissions.

These are easy-to-use hosted pages that you can customize to suit your business needs, with no development effort.

Explore Related Topics

• Theming Default Hosted Pages
• Translation and Language Management
• App Management
• OAuth2 Flows
• Authentication Process

Need help?

For assistance, visit our Support Portal.