Configuring Authentication for a Trust Center

Portal users can access the Trust Center without logging in and are granted access if they have previously interacted with the business. However, while Trust Center can be publicly accessible to all portal users, any pages containing personal information (including Consent preferences, Data elements, and Privacy requests sections) will require users to log in to avoid access to sensitive information.

To configure authentication for Trust Center

  1. On the Trust Center menu, select Portals. The Trust Center portals screen appears.

  2. Click the link in the Portal column for the Trust Center for which you want to enable authentication.
  3. Navigate to the Authentication tab.
  4. In the Allow authentication through section, configure as desired and make the necessary changes. For more information, see Authentication Tab Reference.

Authentication Tab Reference

Allow authentication through:



Field
Description
Email one-time passcode

Enable this setting to allow portal users to log into a Trust Center using the one-time passcode (OTP) sent to their registered email address.

Note:

This is the login method by default.

Email one-time passcode: Allow anyone to sign in

Enable this setting to allow any data subjects to log into the portal.

Email one-time passcode: Assign identifier type

Select the identifier type that will be assigned to users who have not yet registered any consent preferences.

Text message one-time passcode

Enable this setting to allow data subjects to log into a Trust Center using the one-time passcode (OTP) sent to their registered phone number.

Note:

This option is only available if you have a Universal Consent & Preference Management subscription.

Text message one-time passcode: Allow anyone to sign in

Enable this setting to allow any data subjects to log into the portal.

Text message one-time passcode: Assign identifier type

Select the identifier type that will be assigned to users who have not yet registered any consent preferences.

Verify users with Captcha

Enable this setting to require end users to fill out a Captcha security test before logging in.

Magic Link

Enable this setting to create tailored access tokens for each data subject that they can use to securely access the Trust Center.



Note:

This option is only available if you have a Universal Consent & Preference Management subscription.

Login page



Field
Description
Upload image

Click this button to select a logo to display on your login page.

Note:

By default, when you create your Trust Center, the logo is enabled and is set to the same logo configured in Brand > Desktop Logo.

For more information, see Configuring Branding for a Trust Center.

Add an optional message to appear above the login form fields

Enter text for the welcome message you want to display to end users.

Login logo alt text

Enter alternative text for the login logo.

Troubleshooting page



Field
Description
Show link to troubleshooting page

Enable this setting to show a troubleshooting link on the Login screen to help users when logging in.The rich text editor appears when this setting is enabled, offering a variety of formatting options to help you personalize and organize your Troubleshooting page.For more information, see Rich Text Editor Reference.

Show link to troubleshooting page: Page link

The Default and Custom labels fields appear after enabling the Show link to troubleshooting page setting. Enter a value for Custom labels if you want to customize your message.

Button labels



Field
Description
Log in

Enter a different value in the Custom labels field to change the Log in Default text if you want to personalize your log in message.

Log out

Enter a different value in the Custom labels field to change the Log out Default text if you want to personalize your log out message.

Error message labels



Field
Description
Login failed: Please try again.

Enter a different value in the Custom labels field to update and customize your login failed message.

Portal Screen Reference

Email



Phone



Accessing the Trust Center with an email

  1. When a user attempts to access the portal, they will be directed to the Login screen.

  2. Select Email to log into the Trust Center using an email.

  3. Enter your email and click the Log in button. A one-time code similar to a one-time password (OTP) is sent to the entered email and the Verification Code field appears.

  4. Optionally, click the Troubleshooting page link to learn more about the most common issues when logging in.



  5. Enter the code that you received in the Verification Code field.

    Your Trust Center Login email



    Verification Code screen



    Note:

    A new code can be requested after 60 seconds.

  6. Click the Submit button.

Accessing the Trust Center with a phone number

Note:

This option is only available if you have a Universal Consent & Preference Management subscription. Data subjects must have a phone-based primary or additional identifier.

  1. When a user attempts to access the portal, they will be directed to the Login screen.

  2. Select Phone Number to log into the Trust Center using a telephone number.

  3. Select your country code and enter your phone number and click the Log in button. A one-time code similar to a one-time password (OTP) is sent to the entered phone number and the Verification Code field appears.

    Note:

    When new users without existing profiles in OneTrust enter phone numbers into the Trust Center and their profile gets created, special characters are removed from their phone number identifier for format standardization.

  4. Enter the code that you received in the Verification Code field.



    Note:

    A new code can be requested after 60 seconds.

  5. Click the Submit button.

Session Logout Behavior

A session timeout mechanism has been introduced for users who are logged into the Trust Center. This measure helps prevent unauthorized access in cases where a logged-in session is left unattended, ensuring that personal and sensitive information remains secure. See below for the possible scenarios and corresponding screens.

Note:

Timeout duration is customizable.

Scenario 1 (Standard)

To ensure a smooth experience, the user session will automatically renew as long as they are actively using the portal. However, if the session expires due to inactivity, the portal user will be redirected to the Login screen. At that point, a message will appear in the Login screen explaining the reason: “Your session has expired due to inactivity” to help clarify why the user is being asked to log in again.



Scenario 2 (Embedded)

  1. If your portal is pre-authenticated using a JSON Web Token (JWT), the session timeout is controlled by the expiration time set in the token itself. When the session expires, portal users will see a timeout screen, but they will not be redirected to a login page.

  2. Similarly, if you are allowing users to log in using a magic link authentication only, they will also see a timeout screen prompting them to log in again with their magic link. In this case, re-authentication via email or phone number is not supported after the session ends.



Available languages for Phone Verification Login SMS

Phone verification login messages can be translated into multiple languages, and they can be displayed in a specific language by defining the locale values directly in the Verify template. OneTrust available languages and language-locale tags are listed below in alphabetical order by language.

Note:

Phone verification login messages will be sent in English as the default user language if a translation has not been defined for a specific language-locale.

Language

Corresponding OneTrust language

Afrikaans

af & af-xx

German

de & de-xx

English (British)

en-GB

English (American)

en & en-xx (unless exception)

Arabic

ar & ar-xx

Catalan

ca & ca-xx

Chinese (simplified using mainland terms)

zh & zh-xx (unless exception)

Chinese (simplified using Hong Kong terms)

zh-HK

Korean

ko & ko-xx

Croatian

hr & hr-xx

Danish

da & da-xx

Spanish

es & es-xx

Estonian

et & et-xx

Finnish

fi & fi-xx

French

fr & fr-xx

Greek

el & el-xx

Hindi

hi & he-xx

Hungarian

hu & hu-xx

Hebrew

he & he-xx

Indonesian

id & id-xx

Italian

it & it-xx

Japanese

ja & ja-xx

Kannada

kn & kn-xx

Lithuanian

lt & lt-xx

Malay

ms & ms-xx

Marathi

mr & mr-xx

Norwegian

nb & nb-xx

Dutch

nl & nl-xx

Polish

pl & pl-xx

Portuguese (Brazilian)

pt-BR

Portuguese

pt & pt-xx (unless exception)

Romanian

ro & ro-x

Russian

ru & ru-xx

Slovak

sk & sk-xx

Swedish

sv & sv-xx

Tagalog

tl & tl-xx

Czech

cs & cs-xx

Telugu

te & te-xx

Thai

th & th-xx

Turkish

tr & tr-xx

Ukrainian

uk & uk-xx

Vietnamese

vi & vi-xx

Unified Authentication: Login Logic

To enhance user experience, the authentication process for Privacy Rights Automation (DSAR) and Universal Consent & Preference Management (UCPM) has been consolidated into a single, unified flow. This integration ensures that portal users can now seamlessly access Consent preferences and Privacy requests authenticated sections of the Trust Center. By aligning the authentication mechanisms, the system not only simplifies access but also improves maintainability and security across the board.

Note:

At the moment, DSAR does not support phone numbers. Users logging in via phone will not be able to see their privacy requests.

If you are using a hybrid Trust Center, refer to the table below to see how authentication rules are applied based on the contents of the portal.

Trust Center Authentication Rules

User

Trust Center content

Can they log in?

Has a UCPM profile

Has ever submitted privacy requests

UCPM sections

DSAR sections

but only via email (for now) as DSAR does not support phone numbers.

no matter the content.

Rich Text Editor Reference



Available Icons

Description

The following icons are available to format your text.

Click the More Text icon to show additional text formatting options.

The following options are available:

  • Bold - Makes the selected text bold.

  • Italic - Makes the selected text italic.

  • Underline - Makes the selected text underlined.

  • Subscript - Makes the selected text a smaller typeface at a level below the main text.

  • Superscript - Makes the selected text a smaller typeface at a level above the main text.

  • Font Size - Applies the selected font size to the text.

  • Text Color - Applies the selected color to the selected text.

  • Background Color - Applies the selected color as the background of the selected text.

Paragraph Formatting Options

Available Icons

Description

The following icons are available to format your paragraphs.

Click the More Paragraph icon to show additional paragraph formatting options.

The following options are available:

Note:

Icons with an arrow include additional formatting options from which you can select.

  • Align Left - Left-aligns the selected text.

  • Align Centre - Centers the selected text.

  • Align Right - Right-aligns the selected text.

  • Align Justify - Justifies the selected text.

  • Ordered List - Inserts a numbered (ordered) list.

  • Unordered List - Inserts a bulleted (unordered) list

  • Decrease Indent - Reduces the indentation level of the selected text by one level.

  • Increase Indent - Increases the indentation level of the selected text by one level.

  • Paragraph Format - Expands a list of heading and text styles.

Additional Options

Available Icons

Description

Click the Insert Link icon to insert a link that redirects to another URL when it is clicked. Once clicked, the Insert Link popover appears where you can define the URL and text and decide whether the new destination opens in a new tab.



The following icons are available once a link is added.

The following options are available:

Note:

Icons with an arrow include additional options from which you can select.

  • Choose Link - Select a URL from the predefined list.

  • Open Link - Opens the inserted URL. If the Open in new tab checkbox is selected, a new tab appears. If the checkbox is not selected, the URL opens in the existing page.

  • Style - Expands a list of link styles.

  • Edit Link - Opens the Insert Link popover to edit the link.

  • Unlink - Removes the link from the selected text.

Click the More Rich icon to show additional formatting options.

The following icons are available to insert additional objects within your content block.

The following options are available:

  • Insert Horizontal Line - Inserts a horizontal line.

  • Insert Table - Inserts a table with the selected columns and rows. Additional table formatting options are available once a table is added. For more information, see the row below.

  • Insert Image - Inserts an image you select to include.

Click the Insert Table icon to insert a table with the selected columns and rows.

The following icons become available to format your table when clicking any of the existing cells.

The following options are available:

Note:

Icons with an arrow include additional options from which you can select.

  • Table Header - Applies a header row to the table.

  • Table Footer - Applies a footer row to the table.

  • Remove Table - Deletes the entire table.

  • Row - Inserts or deletes a row in the table.

  • Column - Inserts or deletes a column in the table.

  • Table Style - Expands a list of table styles.

  • Cell - Expands a list of formatting options for the selected cell.

  • Cell Background - Applies the selected color as the background for the selected cell.

  • Vertical Align - Expands a list of vertical alignment options for the selected cell.

  • Horizontal Align - Expands a list of horizontal alignment options for the selected cell.

  • Cell Style - Expands a list of cell styles.

Action and View Options

Available Icons

Description

The following icons are available to perform actions and adjust your view.

Click the More Misc icon to show additional actions and view options.

The following actions are available:

  • Undo - Reverses the last action you performed.

  • Redo - Repeats the last Undo action you performed. The Redo icon only becomes available after you select Undo.

  • Code View - Adjusts the editor to let you view and edit your content in code view.

  • Fullscreen - Adjusts the editor to take up the entire browser window.