Brand Portal configuration queries

[shubhanshu_singh]

1. Is there a way to configure IP allow list for Brand Portal? 
2. Can we disable social login option for Brand Portal?

[SantoshSai · Accepted solution]

Hi @shubhanshu_singh,

1. Can we configure an IP allow list for Brand Portal?
I don't think so - at least not through any self-serve option. Brand Portal doesn’t currently offer a built-in way to configure IP allow lists like you can with some other Adobe services. If it’s a hard requirement, your best bet might be to reach out to Adobe Support and see if they can help set something up at the IMS (identity) level, but it’s definitely not something you can manage directly from the portal.

2. Can we disable social login (Google/Facebook) for Brand Portal?
Yes, this one you can control. If you're using the Adobe Admin Console, go to the Identity section, and make sure your users are set up with either Adobe IDs or Enterprise/Federated IDs only. If Social IDs (like Google or Facebook) are enabled, you should be able to remove or restrict them from there. Just make sure you have the right admin permissions to do that.

[AmitVishwakarma]

Hi @shubhanshu_singh ,

1. Can we configure an IP Allow List for Brand Portal?

No native self-service IP allow-listing is supported in AEM Brand Portal (as of 2025 AEMaaCS releases).

Explanation:

  - AEM Brand Portal is part of the Adobe Experience Cloud, and it runs on Adobe-managed infrastructure.

  - There is no UI or Admin Console setting exposed for IP restriction for Brand Portal specifically.

  - This is different from AEMaaCS Author/Publish, where you can manage IP allow-lists via Dispatcher or IMS.

What you can do:

  - Option 1: Raise a support ticket to Adobe

        - Go to: https://adminconsole.adobe.com

        - Navigate to Support > Create Case 

       - Choose Adobe Experience Cloud > Admin/Identity/SSO > Brand Portal

      - Request:

            - "We need to restrict access to Brand Portal by IP address for security compliance. Please confirm if IP allow-listing at the IMS level or Adobe Org level is possible."

Option 2: Use Directory-Level Federation + SSO

  - You can restrict access at the Enterprise Directory level via Federated ID + Azure AD or Okta policies.

  - Apply conditional access policies (e.g., IP restrictions) in your IdP, not in Brand Portal itself.

  - This works well in enterprise setups where Brand Portal authentication is managed through SAML SSO/Federated IDs.

2. Can we disable social login (Google/Facebook) for Brand Portal?

Yes, this is possible via Adobe Admin Console

Steps to Disable Social Login:

  - Login to Admin Console - https://adminconsole.adobe.com

  - Go to "Identity" => Choose your Organization

Under Identity Types, you'll see:

    - Adobe ID (default)

    - Federated ID

    - Enterprise ID

    - Social ID (Google, Facebook, Apple) only if allowed

To disable social login:

   - Ensure no user directory is configured to allow Social IDs

   - If Social ID was enabled accidentally, go to that directory and remove those identity types

   - Restrict user creation to only Adobe ID, Federated ID, or Enterprise ID

  - Brand Portal inherits auth from Adobe IMS, so if users can't log in using Google or Facebook, they can’t log into Brand Portal using those either.

Regards,
Amit