Facebook

RootAuth supports Facebook login. After it is enabled, users can select Facebook on the login or sign-up page and complete login or registration through Facebook authorization.

Path: Log in to the RootAuth console → open the target application → click Configuration in the top navigation bar → Application Management - Authentication Configuration → select Providers

 

1. Before You Start

Before configuring Facebook login, make sure you have completed the following:

1. You have a Facebook developer account.
2. You have created an app in the Facebook developer platform.
3. You have obtained the Facebook App ID and App Secret.
4. You have prepared your application domain for configuring the OAuth redirect URI.

Facebook verifies the OAuth redirect URI. Make sure the callback URL configured in the Facebook app matches the Valid OAuth Redirect URI shown in RootAuth.

 

2. Enable Facebook in RootAuth

In the provider list, find Facebook and click Enable.

In the configuration dialog, turn on Facebook login and fill in the following information:

Field	Description
App ID	Facebook App ID. Required.
App Secret	Facebook App Secret. Required.
Valid OAuth Redirect URI	Generated by RootAuth. Copy it and configure it in the Facebook app settings.
Permissions	Includes public_profile by default. You can also select email if needed.
Login mode	Used for login and sign-up by default
Account binding	Choose whether to automatically link accounts with the same email address

After completing the fields, click Save.

After the configuration is saved, Facebook is shown as Enabled and Custom credentials, and the action button changes to Manage. To update the configuration later, click Manage.

 

3. Account Binding

Facebook login supports automatic account binding.

• When Account binding is enabled, if the email returned by Facebook matches an existing account email in RootAuth, RootAuth automatically links the Facebook identity to that account and completes login. If no matching email is found, a new account is created.
• When Account binding is disabled, Facebook login does not automatically link to an existing email account. Even if the Facebook email matches an existing account email, RootAuth creates or logs in to an independent account through the Facebook login entry.

If accounts were previously created through different login methods, RootAuth determines which account to log in to based on the current login entry and existing account relationships after account binding is enabled.

 

4. How Users Log In with Facebook

After Facebook login is enabled, the login or sign-up page displays a Facebook login button.

If Google, Telegram, and Facebook are enabled at the same time, the social login buttons are displayed on the login or sign-up page according to the current configuration. When a user clicks Facebook, they are redirected to the Facebook authorization page.

After the user confirms authorization, RootAuth automatically completes the following steps:

1. Receives the user information returned by Facebook.
2. Checks whether an existing account should be linked based on the account binding setting.
3. If an existing account can be linked, logs the user in to that account.
4. If no account can be linked, creates a new account and completes login.

 

5. View a User's Facebook Authentication Method

After a user logs in or signs up with Facebook, you can view the authentication record in the user details.

Go to User Management, open the target user's details, and check the Authentication Methods section.

The Facebook authentication method displays:

Field	Description
Authentication method	Facebook
Identifier	Facebook email or Facebook ID. If an email is available, the email is shown first.
Last used	The most recent time the user logged in with Facebook

If the application unbinds the user's Facebook account through the API, this authentication method is removed from the user details.

 

6. Integration Options

Facebook login supports two integration options:

Integration option	Description
Hosted	Use the login and sign-up pages hosted by RootAuth. After Facebook is enabled, the Facebook login button is displayed automatically.
API	Build your own Facebook login entry in your application, then use APIs to complete login, binding, or unbinding.

For integration details, see the Developer Integration documentation.

 

7. Disable Facebook Login

To disable Facebook login, open the Facebook management dialog, turn off the switch, and save the configuration.

After Facebook login is disabled:

1. The Facebook login button is no longer shown on the login or sign-up page.
2. The saved Facebook credentials are retained.
3. Existing users' Facebook binding records are not deleted.
4. When you enable it again later, you can continue using the previous configuration.

If a user still sees an old cached login page and clicks Facebook login, RootAuth blocks the request and shows a login failure message. After the user refreshes the page, the latest login configuration is loaded.