Configure Facebook Authentication Source

Overview

Facebook authentication login allows users to securely log in to third-party applications or websites using Facebook as the authentication source. To facilitate enterprise user authentication, the IDaaS platform supports configuring Facebook as an authentication source. Users can log in to various application systems through Facebook authentication, providing enterprise users with a simpler, more convenient login method and a better user experience. Currently, this feature is only supported in 2C scenarios.

This chapter describes the related operations for configuring a Facebook authentication source.

Prerequisites

• Have administrator permissions for the Facebook Developer Platform.
• Have administrator permissions for the IDaaS Enterprise Center platform.

Steps

Create an App on the Facebook Developer Platform

1. Log in to the Facebook Developer Platform (opens new window), log in with your Facebook account, create an app, select the business type, and configure basic app information.

   

   

2. Add the Facebook Login product to the newly created app.

   

3. In the left menu, select "Settings > Basic" to obtain the App ID and App Secret.

   

Configure Facebook Authentication Source on the IDaaS Platform

1. Log in to the IDaaS Enterprise Center platform. In the top navigation bar, select "Authentication > Authentication Source Management," go to the Facebook authentication source page, and click "Add Authentication Source."

   

2. Configure the Facebook authentication source parameters according to the interface prompts. Key parameter descriptions are as follows.

   

   When no user is associated: This refers to when the authentication source attributes of the user information returned by the Facebook platform do not match the associated user attributes in IDaaS, and no system user is linked. The optional configuration items are as follows.

   • Login as Registration: When no user is associated, entering the SMS verification code allows direct registration of the user for authentication login.
   • Bind Existing User: When no user is associated, using the configured binding method redirects to the corresponding verification page. After successfully entering the SMS verification code or password, the corresponding existing user can be bound.

3. Obtain the callback address generated by the Facebook authentication source (example: https://xxx.bccastle.com/api/v1/login/facebook). Return to the Facebook Developer Platform (opens new window), and select "Facebook Login > Settings." Fill in the callback address in the "Valid OAuth Redirect URIs" field.