A Login Page is the first screen users see when they visit a SmartSimple system URL. It authenticates users before granting access to the platform. Each SmartSimple instance can have multiple login pages, one per supported language, and optionally a set of alternate login pages tied to specific URLs.
The login page performs the following functions:
- User authentication (username and password entry)
- Language switching between available language-specific login pages
- Redirecting users to a signup page via a routing page
- Requesting user consent for cookie usage
- Enforcing agreement to the system's privacy and security policies
- Password reset via a Forgot Password link
Who: Global administrators
When to Use Login Pages
Use Login Pages when:
- Setting up a new SmartSimple instance and configuring the initial login experience.
- The system supports multiple languages and a login page is needed for each.
- New users need to be directed to one or more signup pages before logging in.
- The organization requires users to accept privacy and security policies before accessing the system.
- A specific group of users needs a dedicated login URL (alternate login pages).
How Login Pages Work
Login Pages support a range of configurable behaviors, including branding, language handling, user consent, policy enforcement, and account security.
Branding
Login pages are configurable in appearance. Administrators can set a background image, background color, opacity, panel color, and font color. Background images should be generic with solid colors, patterns, or photographs and avoid logos or text that must remain visible, as the image is used across all screen sizes and orientations.
Language Switching
Administrators can create a separate login page for each supported language. When multiple language login pages exist and the Page Layout is set to Default, users see a language dropdown in the upper right corner. Users can select a preferred language, and that choice persists after logging in.
If a single login page is used for all users, users are directed to the language they last selected within the platform upon login.
Administrators designate the default language login page using a toggle on the login page settings page. This determines which page loads when a user visits the following URL without specifying a language ID:
https://youralias.smartsimple.com/
Routing Pages
A routing page directs users to the appropriate signup page. When a user clicks the Register button on the login page, they are taken to an intermediary routing page listing available signup pages. Routing pages are useful when multiple signup pages exist for different user or organization types, multiple signup pages exist in different languages, or multiple eligibility questionnaires are in use.
Cookie Agreement
On their first visit, users see an alert stating that SmartSimple uses cookies and that by using the system they consent to cookie use. A link to a full description of cookies in use is also provided.
Privacy and Security Policies
Administrators can configure privacy and security policies for various language and country combinations. By default, the login page shows a Privacy & Security Policies button beneath the email and password fields. After login, users with a country specified in their profile can access country- and language-specific policies in the header.
If an Enforce User Acceptance date is set, users are directed to the policies upon login and must accept them before accessing the system. Acceptance is recorded and can be retrieved. Privacy and Security Policies Overview contains more information.
Forgot Password
A Forgot Password link appears on the login page by default. Users enter an email address and receive password reset instructions if the address is registered in the system. The account recovery email content is configurable by administrators.
CAPTCHA
After two failed login attempts, a CAPTCHA challenge is displayed to verify the user is human. Administrators can configure Google reCAPTCHA or an alternate CAPTCHA service. An alternate CAPTCHA can also be configured specifically for users in countries that cannot connect to standard CAPTCHA servers (for example, China), configured under the Security tab in Global Settings.
Popup Blocker Check
When using a custom page template, the login page can be configured to detect whether a user has a popup blocker enabled. If detected, the user receives a warning suggesting they disable it. This setting is disabled by default.
Alternate Login Pages
Alternate login pages are separate login pages tied to a specific URL, created and managed under the Alternate tab in the Login Pages list. They require additional customization and use a longer URL format:
https://myalias.smartsimple.com/welcome/MyFolder/?u=1
Alternate login pages function differently from primary login pages. Code from primary pages cannot be reused.
Failed Login Log
If a user attempts to log in unsuccessfully, administrators can view an audit log of the usernames (email addresses entered), IP addresses, and timestamps of those attempts. Locked accounts and related settings are also accessible from the same location.
Security Implications
Several security features are built into Login Pages to help protect user accounts and control access to the system.
- CAPTCHA protects the login page from automated login attempts after two consecutive failures.
- Privacy and Security Policies enforcement ensures users formally acknowledge policy terms before accessing the system, with a timestamped acceptance record.
- Failed Login Log gives administrators visibility into failed access attempts and locked accounts.
- Persistent Cookies, available on alternate login pages, allow automatic authentication. Enabling persistent cookies is recommended only when appropriate for the site's security requirements.
- Popup Blocker Check is relevant when a login page relies on popup windows for functionality; leave disabled if the login page does not use popups.
Resources
For more information about Login Pages, see: