Facebook sign-in guide

Before you start

• Have a working Facebook account ready and allow the authorization popup.
• Merchants must configure the Facebook App ID/Secret and activate the storefront entry before the Facebook logo appears on the login page.
• If the account is not linked on first authorization, choose to link an existing store account or create a new one.

Meta permissions merchants must enable

This store’s Facebook sign-in always requests these OAuth permissions (same as the admin setup guide and FacebookProvider):

• public_profile — Name and profile picture (shown as “Name and profile picture” on the consent dialog)
• email — Email (shown as “Email” on the consent dialog)

In Development mode, verify with app roles or test users. Before serving ordinary customers, request Advanced Access for these permissions under Meta App Review / Permissions and features, complete Login Review, and switch the app to Live.

Sign-in steps

1. On the login page, click the Facebook logo under Quick sign-in.
2. Confirm authorization on Facebook, then return to this store.
3. If already linked, you sign in directly. If not, follow the prompts to link or create an account.

FAQ

• Don’t see the Facebook entry?

  Confirm the Facebook storefront entry is activated in admin and the widget has not disabled enable_facebook.

• Can’t find a Login use case when creating a Meta app?

  The new wizard’s Featured/All lists often omit Facebook Login. Scroll to the bottom, choose Other (Consumer) or Create an app without a use case, then add the Facebook Login product in the app dashboard—don’t substitute ads use cases.

• Redirect URI validator says invalid?

  Paste the full callback URL into Valid OAuth Redirect URIs above and save—the validator only tests and does not write the list. Quick popup also needs Login with JavaScript SDK enabled and an allowed domain.

• Consent page shows “Submit for Login Review”?

  It means `public_profile` / `email` have not passed Meta Login Review. App roles and test users can usually still Continue for integration testing; before serving ordinary Facebook users you must submit and get Advanced Access approved.

• Don’t see Facebook One Tap?

  This site uses Meta FedCM One Tap (requires a click to confirm, and does not support silent automatic login). It requires HTTPS, Chrome 131 or later, the JS SDK must be enabled, and the allowed domain must be registered. New users should click the logo. This feature will not appear if background "Facebook One Tap" is disabled or if the user is already logged in to this site.

• What if no email is returned?

  Some Facebook accounts may not return an email. This store uses a placeholder email to complete linking; later one-click sign-in still works.