Facebook

RootAuth supports Facebook login. After it is enabled, users can select Facebook on the login or sign-up page and complete login or registration through Facebook authorization.

Path: Log in to the RootAuth console → open the target application → click Configuration in the top navigation bar → Application Management - Authentication Configuration → select Providers

 

1. Before You Start

Before configuring Facebook login, make sure you have completed the following:

1. You have a Facebook developer account.
2. You have created an app in the Facebook developer platform.
3. You have obtained the Facebook App ID and App Secret.
4. You have prepared your application domain for configuring the OAuth redirect URI.

Facebook verifies the OAuth redirect URI. Make sure the callback URL configured in the Facebook app matches the Valid OAuth Redirect URI shown in RootAuth.

 

2. Enable Facebook in RootAuth

In the provider list, find Facebook and click Enable.

In the configuration dialog, turn on Facebook login and fill in the following information:

Field	Description
App ID	Facebook App ID. Required.
App Secret	Facebook App Secret. Required.
Valid OAuth Redirect URI	Generated by RootAuth. Copy it and configure it in the Facebook app settings.
Permissions	Includes public_profile by default. You can also select email if needed.
Login mode	Used for login and sign-up by default
Account binding	Enabled by default. Choose Automatic linking or Required linking when enabled; turn it off to disable account binding.

After completing the fields, click Save.

After the configuration is saved, Facebook is shown as Enabled and Custom credentials, and the action button changes to Manage. To update the configuration later, click Manage.

 

3. Account Binding

Setting	Behavior
Automatic linking	If the email in the Facebook account matches an existing RootAuth account email, RootAuth automatically links the Facebook identity to that account and signs the user in. Otherwise, it creates a new account. If Facebook does not return an email address, RootAuth creates a new account. No additional user action is required.
Required linking	When the email matches, RootAuth displays a confirmation dialog. The user confirms the link and completes email verification. If the user cancels, the sign-in or sign-up attempt fails. If Facebook does not return an email address, RootAuth creates a new account.
Account binding off	When account binding is off, Facebook third-party sign-in and sign-up, or registration with the same Facebook email, are treated as two different accounts. When account binding is enabled, existing historical accounts are selected according to the current sign-in entry and their account-linking relationship.

 

If historical accounts were created through different entries, RootAuth uses the current sign-in entry and account-linking relationships to determine which account to sign in to after account binding is enabled.

 

4. How Users Log In with Facebook

After Facebook login is enabled, the login or sign-up page displays a Facebook login button.

If Google, Telegram, and Facebook are enabled at the same time, the social login buttons are displayed on the login or sign-up page according to the current configuration. When a user clicks Facebook, they are redirected to the Facebook authorization page.

After the user confirms authorization, RootAuth automatically completes the following steps:

1. Receives the user information returned by Facebook.
2. Checks whether an existing account should be linked based on the account binding setting.
3. If an existing account can be linked, logs the user in to that account.
4. If no account can be linked, creates a new account and completes login.

 

5. View a User's Facebook Authentication Method

After a user logs in or signs up with Facebook, you can view the authentication record in the user details.

Go to User Management, open the target user's details, and check the Authentication Methods section.

The Facebook authentication method displays:

Field	Description
Authentication method	Facebook
Identifier	Facebook email or Facebook ID. If an email is available, the email is shown first.
Last used	The most recent time the user logged in with Facebook

If the application unbinds the user's Facebook account through the API, this authentication method is removed from the user details.

 

6. Integration Options

Facebook login supports two integration options:

Integration option	Description
Hosted	Use the login and sign-up pages hosted by RootAuth. After Facebook is enabled, the Facebook login button is displayed automatically.
API	Build your own Facebook login entry in your application, then use APIs to complete login, binding, or unbinding.

For integration details, see the Developer Integration documentation.

 

7. Disable Facebook Login

To disable Facebook login, open the Facebook management dialog, turn off the switch, and save the configuration.

After Facebook login is disabled:

1. The Facebook login button is no longer shown on the login or sign-up page.
2. The saved Facebook credentials are retained.
3. Existing users' Facebook binding records are not deleted.
4. When you enable it again later, you can continue using the previous configuration.

If a user still sees an old cached login page and clicks Facebook login, RootAuth blocks the request and shows a login failure message. After the user refreshes the page, the latest login configuration is loaded.