Facebook external IDP

The Facebook Login social connection allows users to log in to your application using their Facebook profile.

Request credentials at Facebook

Prerequisites

This process requires:

• A Facebook Developer account

Create an app at Facebook

1. Log in to the Facebook developer portal, using your Facebook Developer account.

2. Click Create App.

3. Give the app a name and a contact email address. Click Next.

4. Select Authenticate and request data from users with Facebook Login.

5. To use this app in production, you need to finish the Business verification and app review process.

Add Facebook login configuration

1. Open the app that you created.

2. In the left-side menu, ensure that you see the Facebook Login product.

3. Open the Facebook Login menu section and click Settings.

4. Make sure that these options are enabled:

   • Client OAuth login
   • Web OAuth Login
   • Enforce HTTPS
   • Use Strict Mode for redirect URIs

5. Add your Valid OAuth Redirect URIs, which look like: https://<tenant-domain>/broker/authentication/callback.

6. Save your changes.

Fetch the credentials

1. While you still have the app open, in the left-side menu, open App setting > Basic.

2. Copy the App ID.

3. Show and copy the App secret.

Configure Facebook login in the Identity Broker

1. Click Add identity provider and select Facebook.

In a typical scenario, you fill in the following connection details:

• Display name: Facebook (just an example)
• Active: Select the check box
• Client ID: The app ID
• Client secret: The app secret

Variant

You always need at least one variant. For Facebook, you only need to configure a variant name, such as Authentication. For scopes, Thales recommends email and public_profile, but you could also add permissions.