-
Type:
Suggestion
-
Resolution: Unresolved
-
None
-
Component/s: Server - Authentication
-
None
-
17
-
27
Problem
Since Confluence 9.0, the login.vm file has been removed from the Confluence installation directory as part of security enhancements. This change makes the login page customization documented here no longer possible. This impacts all new releases starting from Confluence 9.0.
Similarly, porting any customization made in the 404.vm historically is proven difficult starting Confluence 9.0.
Suggested Solution
Reintroduce a supported method or configurable feature that allows customization of the login page without compromising the security enhancements introduced in Confluence 9.0. Same for the page not found page and other common Velocity based customization.
Why This Is Important
Login page customization is critical for organizations that require branding consistency, accessibility enhancements, or additional information displayed for their users during login. The inability to customize the login page limits flexibility for these use cases and can hinder adoption of newer Confluence releases for businesses that rely on these customizations.
Other customization pages would also be great to redo.
Workaround
Option 1
If you are running Conflence behind a reverse proxy (NGINX, Apache HTTPD, or other load balancer), one of our customers has configured redirect rules on the reverse proxy side to redirect to the desired password reset link.
Option 2
Another option is you can enable the legacy login form as below:
- Edit the <installation-directory>/bin/setenv.sh file
- Add this line right before the "export CATALINA_OPTS" line:
CATALINA_OPTS="-Datlassian.authentication.legacy.mode=true ${CATALINA_OPTS}" - Save your changes
- Then follow the steps from the KB article: How to change the Forgot Password link in Confluence to redirect to an alternate page from Confluence 9.0.2 and newer to change the forgot password link.
- Add this line right before the "export CATALINA_OPTS" line:
Option 3
Or else, in case you would like to remove the "Can't login" option completely till you figure out an alternate solution for this:
- On the Confluence UI, navigate to General Configuration >> Look and Feel >> Custom HTML
- Adding the following to custom HTML under the HEAD section will help achieve that.
<style type="text/css"> a[href*="forgotuserpassword"] { display: none !important; } </style>
If above options does not help,
- For login page customisation follow steps described in: https://confluence.atlassian.com/conf92/customizing-the-login-page-1489810152.html