Clients can register and sign in with an account they already have. Each provider needs an app created at the provider and a redirect address that matches exactly.
- Create the app at the provider
A Google Cloud OAuth client, a Facebook app with Facebook Login, or an X (Twitter) app with sign-in and email access.
- Register the redirect address
Copy it exactly:
/auth/provider/google_signin/finalize,/auth/provider/facebook_signin/finalizeor/auth/provider/twitter_oauth/authorizeon your HTTPS System URL. - Paste the credentials
Settings › Sign-In Integrations: activate the provider, paste its two values, tick Enabled and save.
- Publish the app
Google in Testing and Facebook in Development only let their own test accounts in.
- Test in a private window
Sign in, sign out, and sign in again: the second time must match the same account, not make another.
redirect_uri_mismatch
The address registered at the provider differs from the one WBAMS sent: check scheme, host, path and trailing slash.
No email, no account
WBAMS identifies a client by email. A Facebook or X account that shares no email cannot register this way.
Full guide
The complete reference is Set up social sign-in in the WBAMS documentation.