Need to control who can access your Hub? Require a password for access with Hub Authentication.
Before you begin
- To enable Hub Authentication, you need to be a member of the Account Administrator or Content Manager user groups.
- To apply advanced customizations to the Hub Authentication login page, you will need be familiar with Uberflip Custom Code, as well as the ability to write HTML and CSS.
- This article is about Hub-level access control. For Stream-level access control, see this article.
- This feature is not available on all packs.
About Hub Authentication
Most Hubs are intended to be open, where anyone can visit and browse through the content inside. But for some Hubs, you might want to restrict access to just a specific audience — for example, if you have a Hub for internal-only content. With these Hubs, you can use Hub Authentication to limit access. When Hub Authentication is enabled, anyone who visits any page within that Hub will be prompted to enter a password before they can view the page:
Info
The colors used for this login page are determined by your Hub's general Background + Link Color setting Appearance > Branding > Colors. However, if you want, you can also use HTML/CSS custom code to change the styling of the page to your liking.
Enable Hub Authentication
You can enable or disable Hub Authentication at any time, and the setting takes effect immediately. Simply turning on the feature will enable basic authentication (i.e. a simple password prompt). In this mode, you can specify one or multiple passwords. Specifying multiple passwords is useful if you want to provide separate passwords to different users (or groups of users), so that you can revoke access for just that user/group later (by disabling the corresponding password).
- Log in to Uberflip and click on Hubs (select the Hub you want to enable Hub Authentication on, if you have multiple).
- In the sidebar menu on the left, click on Hub Options > Authentication.
- The Authentication options page will appear on the right. Here, the Status should be displayed as Not-Protected by default.
- Switch the toggle next to Status to the on (green) position. This will also change the Status to Protected.
- The change will take effect immediately, and all visitors to your Hub will be prompted for a password. To allow them to log in, you will first need to create a password (or multiple passwords). Create a password by typing it into the Add your password field, then click on the + button to add it to your list of passwords.
The password can be any alphanumeric string 6-40 characters long. Above is an example password that follows a particular school of thought on password strength. - This will add it to the list of passwords for your Hub, which are listed below.
- To disable a password, remove it by clicking on the x button below it. This will immediately remove the password from the list, and deactivate it so that it can no longer be used to log in.
Note
When you delete a password, anyone who has previously logged in with that password will still be able to access the Hub until they end their session (i.e. until they fully close their browser), or delete their cookies.
Note that it is not possible to force-logout visitors who previously accessed the Hub with a now-disabled password.
Customize the Hub Authentication Login Page
By default, the Hub Authentication login page will consist of:
- A solid background color, as defined by the Background + Link Color setting in Appearance > Branding > Colors
- Your Hub Hero logo (if present), as set in Appearance > Branding > Images
- The text "Please enter a valid password to enter this Hub"
- A password field in white, with the text "enter password"
- A button with the text "submit", in a solid color as defined by the Navigation Color setting in Appearance > Branding > Colors
By using Custom Code, you can modify all of these elements in any way you like. To do this, you must enable Custom Code on the login page by going to Hub Options > Authentication and checking the box next to Include Custom Code.
You can then add a Custom Code Block with CSS that targets the class
body.hub-login
Your Custom HTML/CSS will override the default used on the login page, allowing you to style it any way you like.
Additional notes
- If you enable both Hub Authentication and Stream Authentication at the same time, they will be in effect independently. In other words, entering the Hub password will not also provide access to any protected Stream: each Stream with Stream Authentication enabled will still prompt for a passphrase.