Social login
Google, GitHub, Microsoft, Apple and 10 more providers, with 9in's shared apps or your own.
Social login adds "Continue with Google" (and others) to the hosted sign-in and sign-up pages. Turn providers on under Connections → Social; your apps don't change.
#Providers
| Provider | ID | 9in's shared app |
|---|---|---|
google | Yes | |
| GitHub | github | Yes |
| Microsoft (personal and work accounts) | microsoft | Yes |
| Apple | apple | No |
facebook | No | |
linkedin | No | |
| GitLab | gitlab | No |
| Bitbucket | bitbucket | No |
| Discord | discord | No |
| Slack | slack | No |
| Twitch | twitch | No |
| X | x | No |
| Amazon | amazon | No |
| Yahoo | yahoo | No |
Ready to use: Google, GitHub and Microsoft work as soon as you turn them on, through 9in's shared apps. The provider's consent screen then names 9in. Switch to your own app at any time to show your name instead, or to ask for extra scopes.
Bring your own app: the others need an OAuth app you create in the provider's developer console. Each provider's settings in the console show the steps and the redirect URI to register:
https://acme.9in.io/oauth/social/callback(With a custom domain, use https://login.acme.com/oauth/social/callback.) Paste the client ID and secret into the console; secrets are stored encrypted.
#Apple
Sign in with Apple needs a Services ID (the client ID), your Team ID, and a Sign in with Apple key (Key ID and the .p8 private key). Apple sends the user's name only on their first sign-in, and may hide their real email behind a relay address.
#Linking accounts
When someone signs in with a provider for the first time, 9in either creates a new user or links the identity to an existing user with the same email. It links only when the provider vouches for the address:
- Apple, LinkedIn, GitLab, Slack, Twitch, Yahoo and Discord: when the provider says the email is verified.
- Google: for Gmail addresses and Google Workspace accounts (Google is authoritative for those).
- GitHub and Bitbucket: the account's primary, verified email.
- Microsoft, Facebook, X and Amazon: never. Their accounts can carry addresses the provider hasn't verified for this purpose, so a first sign-in with them always creates its own user.
A user can have several identities. The Management API shows them under identities (social:google with Google's user id as subject, and so on).
#What you get
Social users are normal users: the same sub, the same tokens, the same profile claims (name, picture, email when the provider shares it). Their identities appear in the console and in the Management API. Two-factor still applies if they have it on.
#Button order and look
Buttons appear in the order of the providers above, styled by the theme. A custom theme can show them differently, or not at all.