Learn how to use Stream Authentication to password-protect specific Streams in your Hub.
Before you Begin
- To set up Stream Authentication on Marketing Streams, you need to be an Account Admin or Content Manager.
- To set up Stream Authentication on Sales Streams, you need to be an Account Admin or Sales Rep.
- This article is about Stream-level access control. For Hub-level access control, see this article.
- This feature is not available on all packs.
About Stream Authentication
Most Hubs are intended to be fully open, so that any visitor can access them. If you'd rather control who can get into your Hub, you have the option enabling Hub Authentication, which prompts all visitors to enter a password before they can view the Hub.
However, this all-or-nothing approach doesn't work for all use cases: sometimes, you want a hybrid option in which most of your Hub is accessible, and only specific Streams are gated off. If this is what you are looking to achieve, you can use Stream Authentication.
Here's a quick overview of how Stream Authentication works:
- When Stream Authentication is enabled on a Stream, any visitor who tries to access that Stream (or any content within it) will be prompted to enter a password, which we refer to as a "passphrase" for Stream Authentication. The Stream/content will be displayed only if a valid passphrase is submitted.
- You can specify multiple passphrases for a stream, which allows you to provide different passphrases to different visitors (or groups of visitors). This also means you can selectively revoke access to the Stream for particular users by disabling their passphrase.
- You can enable Stream Authentication on any Marketing Stream or Sales Stream, but it can't be used on any type of source Stream.
Enable Stream Authentication
Stream Authentication is configured on a per-Stream basis, and the settings for each Stream affect that Stream only.
When Stream Authentication is enabled on a Stream, only that specific Stream and the content inside will be protected, while all other Streams/Items in your Hub will still be publicly accessible. If an Item in a protected Stream also appears in other, unprotected Streams, it will still remain accessible when viewed through the unprotected Streams (accessing the same Item in the context of the protected Stream will prompt for a passphrase).
As a best practice, we recommend that you also hide any Streams on which you enable Stream Authentication.
- Log in to Uberflip and click on Hubs (if you have multiple Hubs, select the Hub containing the Stream on which you want to enable Stream Authentication).
- In the sidebar menu on the left, click on Content. In the list of Streams that appears on the right, click on the Stream that you want to password-protect.
- When you're viewing the selected Stream, click on the Authentication tab along the top.
(If you do not see this tab, you may be viewing a Stream type that does not support authentication, or the Stream Authentication feature may not be supported in your Hub or pack type.)
- Under the Authentication tab, switch the toggle under Enable Authentication to the on (green) position.
- The change will be saved automatically, and will take effect immediately. Now, any visitor who tries to access this Stream will be prompted to enter a passphrase:
- To give visitors access to this Stream, you must set up passphrases. To do that, scroll down to the passphrases table and click on the Add Passphrase button.
- The Add Passphrase window will appear. Use the fields provided to type in a passphrase and a description, then click on Add.
- Passphrases must be between 6 and 40 characters long, and must contain at least one letter (A-Z) and one number (0-9); special characters are not required
- The description you provide for each passphrase is displayed in the passphrases table on the Authentication tab, and can be helpful for identifying the user for whom the passphrase was created
- The new passphrase will be added to the passphrase list under the Authentication tab for the Stream. Here, you can see every valid passphrase for the Stream, along with:
- The passphrase itself
- Its description text
- The Hub user who created the passphrase
- The date when the passphrase was created
- Hover your mouse over a passphrase to see more options:
- To edit a passphrase, click on the Edit button to its right.
- To delete the passphrase, click on the Delete button . Note that anyone who has previously logged in with a deactivated password will continue to be able to access the Stream until they end their session (i.e. fully close their browser).
- You can see at a glance which Streams have Stream Authentication enabled/disabled by using the Authentication column in the list of Streams on the Content menu. For non-Marketing/Sales Streams, Not Applicable will be shown here.
- Enabling Stream Authentication on a Stream will also automatically configure the Stream to prevent it from being crawled by search engine robots. This will be reflected on the list of Streams (i.e. the Stream will show as no-index/no-follow), but the toggle shown next to the No Robots Meta Tag setting on the Options tab won't change.
- If you want, you can override the appearance of the Stream Authentication login page to style it in any way you like by using Custom Code. See this Hub Hack for help.
- If you enable both Hub Authentication and Stream Authentication at the same time, they will be in effect independently. In other words, entering the Hub password will not also provide access to any protected Stream: each Stream with Stream Authentication enabled will still prompt for a passphrase.
- At present, Stream Authentication can only be enabled via the Uberflip App. However, we plan to also make this option available in the Uberflip Extension in the near future.
- Currently, reporting on Stream Authentication (i.e. how often/when a passphrase was used, etc.) is not available, but if this is something you'd be interested in, please get in touch!