DOCSLIB.ORG

2. Social Login User Guide

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
2. Social Login User Guide 2. Social Login User Guide Thank you for purchasing our extension. If you have any questions that are beyond the scope of this document, do not hesitate to leave us an email via [email protected] Created: 11/05/2016 | By: Magenest | Support Portal: http://servicedesk.izysync.com/servicedesk/customer/portal/30 Introduction Features For Admins Features For Customers System Requirements Configuration General Configuration Credentials Settings Front end Social login options Sharing on social networks Comment on product using Facebook account Social login suggestion on checkout page Update Support Introduction Magento 2 Social Login is an extension developed by Magenest to help customers login to Magento 2 stores conveniently with their social accounts. Extension's page: Social Login and Share Features For Admins Set up app for each social network including: Twitter, Facebook, Google, Amazon, LinkedIn, Pinterest, Instagram, Reddit, Line Add login popup with social login options Add social login options to sign in, sign up page Set social login suggestion for customer at checkout page for customers who used to login with social account on the store Add comment section using Facebook account for customer on product detail page Add social sharing buttons on product page Features For Customers Choose to login with one of 9 social accounts: Twitter, Facebook, Google, Amazon, Linkedin, Pinterest, Instagram, Reddit, Line Share products on their social networks Use Facebook account to comment on the Magento 2 store Be suggested with social login at checkout page if they used to login with social account on the store System Requirements Your store should be running on Magento 2 Community Edition version 2.0.0, 2.1.x, 2.2.x. Configuration General Configuration First, navigate to Stores > Configuration > Magenest > Social Login, you will be able to enable: The login popup when customer clicks on Sign In button on top menu bar The social login options in Sign Up/Create an account page The social login options in Sign Up/Create an account page The social login on checkout page, including the sign in button on the top of the page, and the social login suggestion for customers who used to login with social accounts on the store The ability to comment on product page using Facebook account The ability to share the product link via social networks that are chosen in the social sharing options: Twitter, Facebook, Google+, LinkedIn, Pinterest, Reddit Credentials Settings In order to connect the social app to your Magento 2 store, you have to set up the app as follows: Google+ How to set Client ID and Client Secret of Google+ Go to the Google Developers Console – https://console.developers.google.com/ Select an existing project, or create a new project by clicking Create Project: In the Project name field, type in a name for your new project. In the Project ID field, the console has created project ID. Click on the Create button and the project to be created within some seconds. In the left sidebar, select APIs under the APIs & auth section. Find the Google+ API service and set its status to Enable. Click Create Credentials select OAuth Client ID. Create Client ID dialog box would be appearing for choosing application type. In the Application type section of the dialog, select Web application and click on the Configure consent screen button. Choose Email address, enter Product name and save the form. In the Authorized JavaScript origins field, enter your app origin. If you want to allow your app to run on different protocols, domains, or subdomains, then you can enter multiple origins. In the Authorized redirect URI field, enter the redirect URL. Click on Create. Now you can see the Client ID for web application section. Select Client ID and Client Secret then fill in Configuration of Google in Backend of Magento 2 store. In the backend of Magento 2, in the Google+ setting Enable: To enable Google login and sharing option Client ID: Google+ application ID Client Secret: Google+ application secret Redirect URI: You will use this URL in Google to connect the app Facebook How to set Client ID and Client Secret of Facebook Go to the https://developers.facebook.com/apps/ and login at your Facebook developer account. Click Add a New App button on the top right to create a new app ID. A popup will display as below In the Facebook for developers Settings, choose Basic, click on the Add Platform button, then enter your site URL. Click on Save changes button. You will see that there are App ID and App secret, note that you will need these to configure the module in the backend of Magento 2. Choose Facebook Login > Settings link from the left menu section at the apps page, fill in Valid OAuth Redirect URIs with the Redirect URI o btained from Magento 2 configuration. Then you have to make your app public to everyone. On the top bar, click on Status, a pop up as below will be displayed. Confirm to make the app public. In Magento 2 backend, Facebook settings: Enable: choose Yes to enable Facebook social login and share Client ID: Fill in the Facebook app ID obtained from above Client Secret: Fill in the Facebook app secret from above Twitter How to set Client ID and Client Secret of Twitter Go to the Application Management page and login with your Twitter developer account. Follow this tutorial article to create a Twitter app http://docs.inboundnow.com/guide/create-twitter-application/ In Magento 2 backend, Twitter settings: Enable: Choose Yes to enable the Twitter social login and share Client ID: Twitter application ID Client Secret: Twitter application secret Pinterest How to set Client ID and Client Secret of Pinterest Go to https://developers.pinterest.com/ and login your Pinterest developer account. Choose App > Create app button to create a new application. New tab is open with App ID and App secret, you must add the site URL and Redirect Uri (obtained from the Google+ settings in Magento backend) for web in the Platforms section. Use the app ID and app secret to configure the module in the Magento 2 backend. In Magento 2 backend, Enable: To enable Pinterest login and share Client ID: Fill in the Pinterest app ID from above Client Secret: Fill in the Pinterest app secret from above Redirect URI: Use this in Pinterest to create application Instagram How to set Client ID and Client Secret of Instagram Go to https://www.instagram.com/developer/ and login at your Instagram developer account. Choose Manage Clients > Register new Client ID, In this registration form, fill in the Redirect Uri (you can get this in Magento 2 configuration) in Valid redirect URIs, and remember to unselec t the Disable implicit OAuth in Security tab. After clicking on Register button, Manage Clients tab is open, you will use the Client ID and Client Secret (in Manage) to configure the module in Magento backend. In Magento 2 backend, go to Instagram configuration. Enable: To enable the Instagram login and share Client ID: Instagram application ID Client Secret: Instagram application secret Redirect URI: Use this in Instagram to create application. LinkedIn How to set Client ID and Client Secret of LinkedIn Go to https://developer.linkedin.com/ and login with your LinkedIn developer account. Choose My Apps > Create Application After filling in necessary information and submit the form, an Authentication tab will be displayed. In the Default Application Permissions, add the Redirect URI obtained from Magento 2 configuration. Then click on Update. In Magento 2 backend, go to LinkedIn configuration Enable: To enable LinkedIn login and share option Client ID: Linkedin application ID Client Secret: Linkedin application secret Redirect URI: Use this in LinkedIn to create application. Front end Social login options Show the Social Login options on Sign Up page Show popup with social login options when clicking on Sign In Twitter login Facebook login Google login Amazon login Amazon login LinkedIn login Instagram login Pinterest login Reddit login Line login Sharing on social networks Customers can share the product link via their social network with the sharing options available for Twitter, Facebook, Google+, LinkedIn, Pinterest and Reddit. Comment on product using Facebook account Under the product descriptions, customers can leave a comment using their Facebook account. Social login suggestion on checkout page If customers used to login with social accounts on the store, on checkout page, when they fill in the email address (which is corresponding with their social account email), the suggestion to login with that social account will be displayed. Update When a new update is available, we will provide you with a new package containing our updated extension. You will have to delete the module directory and repeat the installing steps above. Flush the config cache. Your store and newly installed module should be working as expected. Support We will reply to support requests within 2 business days. We will offer lifetime free update and 6 months free support for all of our paid products. Support includes answering questions related to our products, bug/error fixing to make sure our products fit well in your site exactly like our demo. Support DOES NOT include other series such as customizing our products, installation and uninstallation service. Once again, thank you for purchasing our extension. If you have any questions relating to this extension, please do not hesitate to contact us for support. Magenest.
Load more

Recommended publications
  • Captive Portal Authentication Via Twitter
    Grandstream Networks, Inc. Captive Portal Authentication via Twitter Table of Content SUPPORTED DEVICES ................................................................................................. 4 INTRODUCTION ............................................................................................................. 5 CAPTIVE PORTAL SETTINGS ...................................................................................... 6 Policy Configuration Page .................................................................................................................... 6 Landing Page Redirection ............................................................................................................... 10 Pre-Authentication Rules ................................................................................................................ 10 Post-Authentication Rules ............................................................................................................... 10 Guest Page ........................................................................................................................................ 10 CONFIGURATION STEPS............................................................................................ 12 Create Twitter App .............................................................................................................................. 12 Configure Captive Portal Policy with Twitter Authentication ................................................................. 15 Assign
    [Show full text]
  • Threats and Vulnerabilities in Federation Protocols and Products
    Threats and Vulnerabilities in Federation Protocols and Products Teemu Kääriäinen, CSSLP / Nixu Corporation OWASP Helsinki Chapter Meeting #30 October 11, 2016 Contents • Federation Protocols: OpenID Connect and SAML 2.0 – Basic flows, comparison between the protocols • OAuth 2.0 and OpenID Connect Vulnerabilities and Best Practices – Background for OAuth 2.0 security criticism, vulnerabilities related discussion and publicly disclosed vulnerabilities, best practices, JWT, authorization bypass vulnerabilities, mobile application integration. • SAML 2.0 Vulnerabilities and Best Practices – Best practices, publicly disclosed vulnerabilities • OWASP Top Ten in Access management solutions – Focus on Java deserialization vulnerabilites in different commercial and open source access management products • Forgerock OpenAM, Gluu, CAS, PingFederate 7.3.0 Admin UI, Oracle ADF (Oracle Identity Manager) Federation Protocols: OpenID Connect and SAML 2.0 • OpenID Connect is an emerging technology built on OAuth 2.0 that enables relying parties to verify the identity of an end-user in an interoperable and REST-like manner. • OpenID Connect is not just about authentication. It is also about authorization, delegation and API access management. • Reasons for services to start using OpenID Connect: – Ease of integration. – Ability to integrate client applications running on different platforms: single-page app, web, backend, mobile, IoT. – Allowing 3rd party integrations in a secure, interoperable and scalable manner. • OpenID Connect is proven to be secure and mature technology: – Solves many of the security issues that have been an issue with OAuth 2.0. • OpenID Connect and OAuth 2.0 are used frequently in social login scenarios: – E.g. Google and Microsoft Account are OpenID Connect Identity Providers. Facebook is an OAuth 2.0 authorization server.
    [Show full text]
  • A Investigating User's Perspective of Web Single Sign-On
    A Investigating User’s Perspective of Web Single Sign-On: Conceptual Gaps, Alternative Design and Acceptance Model SAN-TSAI SUN, ERIC POSPISIL, ILDAR MUSLUKHOV, NURAY DINDAR, University of British Columbia KIRSTIE HAWKEY, Dalhousie University KONSTANTIN BEZNOSOV, University of British Columbia Manuscript submitted to ACM Transactions on Internet Technology on January 9th, 2012. Received minor revision decision on October 31th, 2012. Major service providers such as Google, Yahoo, Microsoft and Facebook are competing for the online identity landscape through provisioning of web single sign-on (SSO) solutions. Those billions of SSO- enabled user accounts attract millions of supporting websites; however, average users’ perception of web SSO is still poorly understood. Through several user studies, this work evaluates users’ experience, investigates their perceptions and concerns when using web SSO for authentication, and explores possible improvements. We found several behaviors, concerns, and misconceptions that hinder our participants’ adoption intentions, from inadequate mental models of web SSO, to the reluctancy to have their personal profile information released to SSO-enabled web sites, and to the reduction of perceived web SSO value due to the employment of password management practices. Informed by our findings, we offer a web SSO technology acceptance model, and suggest design improvements. Categories and Subject Descriptors: D.4.6 [Security and Protection]: Authentication General Terms: Security, Human Factors Additional Key Words and Phrases: Web Single Sign-On; OpenID; OAuth; Usable Security; ACM Reference Format: Sun, S., Pospisil, E., Muslukhov, I., Dindar, N., Hawkey, K., Beznosov, K. 2012.Investigating User’s Per- spective of Web Single Sign-On: Conceptual Gaps, Alternative Design and Acceptance Model.
    [Show full text]
  • Social Login
    Social Login An easy way to register and login to your store customer ​ Extension Specification Document Magento 1 Extension URL: https://www.extensionhut.com/magento-extensions/social-login.html Support URL: https://www.extensionhut.com/support www.extensionhut.com PAGE 1 Index Overview 3 Why Social Login? 3 Features 3 Configuration 4 How it works? 6 www.extensionhut.com PAGE 2 Overview Give your customer an easy way to get register or login to your store with social login extension. Let the customer access their account with few clicks and get rid from filing registration or login forms. It provides options to login with different social accounts which includes Facebook, Google+, Twitter, Yahoo and LinkedIn. Why Social Login? ❏ Easy way to login without filling form. ❏ Get into account with single click. ❏ Many social account options to login. Features 1. Multi store configuration with single installation: Extension can be configured for each and every store created in your Magento installation. 2. Separate configuration option for each social account: Each social account option ​ has its own configuration in admin area. 3. Display social icon option: Social icons for customer to login their account can be ​ display on login page and checkout page at different positions(top, bottom, left or right). 4. Enable social icon according to requirement: Each social account can be made ​ enable or disable separately for each store. www.extensionhut.com PAGE 3 Configuration Extension configuration is required to make it ready to function and set-up according to your requirements. Here is step by step guide to configure it.
    [Show full text]
  • EL PASSO: Efficient and Lightweight Privacy-Preserving Single Sign On
    Proceedings on Privacy Enhancing Technologies ; 2021 (2):70–87 Zhiyi Zhang, Michał Król, Alberto Sonnino, Lixia Zhang, and Etienne Rivière EL PASSO: Efficient and Lightweight Privacy-preserving Single Sign On Abstract: Anonymous credentials are a solid founda- 1 Introduction tion for privacy-preserving Single Sign-On (SSO). They enable unlinkable authentication across domains and al- Single Sign-On (SSO) is an answer to the complexity low users to prove their identity without revealing more and fragility of using individual passwords on the web, than necessary. Unfortunately, anonymous credentials i.e., leading to reuse and leaks [1]. SSO enables the use schemes remain difficult to use and complex to deploy. of a unique identity provided by an Identity Provider They require installation and use of complex software at (IdP). Users authenticate themselves to services (called the user side, suffer from poor performance, and do not Relying Parties–RP) with tokens provided by their IdP. support security features that are now common, such SSO improves overall web security [2] and enables the as two-factor authentication, secret recovery, or sup- generalization of good security practices such as the use port for multiple devices. In contrast, Open ID Con- of 2-factor authentication (2FA) [3]. nect (OIDC), the de facto standard for SSO is widely deployed and used despite its lack of concern for users’ Limitations of OpenID Connect. OpenID Connect privacy. We present EL PASSO, a privacy-preserving (OIDC) is a dominant SSO solution used by over a mil- SSO system based on anonymous credentials that does lion websites in 2020 [4].
    [Show full text]
  • Captive Portal Authentication Via Facebook
    Grandstream Networks, Inc. Captive Portal Authentication via Facebook Table of Content SUPPORTED DEVICES ................................................................................................ 4 INTRODUCTION ............................................................................................................ 5 CAPTIVE PORTAL SETTINGS ..................................................................................... 6 Policy Configuration Page ................................................................................................................7 Landing Page Redirection ....................................................................................................... 10 Pre-Authentication Rules ........................................................................................................ 10 Post-Authentication Rules ....................................................................................................... 10 Guest Page ................................................................................................................................... 11 CONFIGURATION STEPS........................................................................................... 12 Create Facebook App .................................................................................................................... 12 Configure Captive Portal Policy with Facebook Authentication ....................................................... 17 Using GWN Master GUI (Standalone mode) ..........................................................................
    [Show full text]
  • 2. Social Login User Guide
    2. Social Login User Guide Thank you for purchasing our extension. If you have any questions that are beyond the scope of this document, do not hesitate to leave us an email via [email protected] Created: 11/05/2016 | By: Magenest | Support Portal: http://servicedesk.izysync.com/servicedesk/customer/portal/30 Introduction Features For Admins Features For Customers System Requirements Configuration General Configuration Credentials Settings Front end Social login options Sharing on social networks Comment on product using Facebook account Social login suggestion on checkout page Update Support Introduction Magento 2 Social Login is an extension developed by Magenest to help customers login to Magento 2 stores conveniently with their social accounts. Features For Admins Set up app for each social network including: Twitter, Facebook, Google, Amazon, LinkedIn, Pinterest, Instagram, Reddit, Line Add login popup with social login options Add social login options to sign in, sign up page Set social login suggestion for customer at checkout page for customers who used to login with social account on the store Add comment section using Facebook account for customer on product detail page Add social sharing buttons on product page Features For Customers Choose to login with one of 9 social accounts: Twitter, Facebook, Google, Amazon, Linkedin, Pinterest, Instagram, Reddit, Line Share products on their social networks Use Facebook account to comment on the Magento 2 store Be suggested with social login at checkout page if they used to login with social account on the store System Requirements Your store should be running on Magento 2 Community Edition version 2.0.0, 2.1.x, 2.2.x.
    [Show full text]
  • The Value of Social Login Solving the Engagement Gap Insights from Consumer Research
    The Value of Social Login Solving the Engagement Gap Insights from Consumer Research tm + As marketers we endeavor to communicate meaningful and authentic dialogues with consumers. But 98% of people say the information we’re trying to share is misaligned. Almost all 10% Q the time Frequently 48% “How often do companies send 98% are information, promotions, etc. mistargeted not relevant to you?” Infrequently 40% Never 2% Q1. How often, if at all, have you experienced a situation where a company has sent you information, promotions, etc. that are not relevant to you? n=593 Why are we having this problem? We need to know who we’re talking to in order to be relevant. Site registration aims to solve this problem. But why doesn’t it always work? For one, people are account fatigued, and more resistant to registering. 53% have 5+ usernames 57% have 5+ passwords *** Q *** “How many 29% have 4—5 usernames *** di!erent *** usernames and 26% have 4—5 passwords *** *** passwords have *** you created 15% have 2—3 usernames *** *** online? 16% have 2—3 passwords *** 3% have 0—1 usernames 1% have 0—1 passwords Q6A. You may not use, let alone remember, all of the di!erent username and passwords that you have created online. However to the best of your knowledge, how many di!erent usernames have you created online for sites that require a username and password? n=593 Even after they’ve created an account, many have forgotten login information and decide to leave sites. Q 92% “How often have 61% have left instead of Qyou gone to a A Few resetting or recovering ? Times website, forgotten login information.
    [Show full text]
  • SOCIAL LOGIN Magento - Installation Instruction Document Contents This Integration Guide Is Useful for All Magento Versions
    SOCIAL LOGIN Magento - Installation Instruction Document Contents This integration guide is useful for all Magento versions. 1. Purpose of the document 1 2. Who can use this document? 1 3. Introduction to Social Login Services 1 4. Functionality Social Login Services 2 5. Installation of Social Login Services at Magento Extension 3 5.1. Magento Installation 3 6. Configuration of Social Login Services at Magento Extension 4 6.1. Log in to Magento Admin Panel 4 6.2. Configuration into Magento Admin Panel 4 6.3. Steps to add Social Log In Block 6 6.4. Displaying Social Login Icons on pages 8 7. Conclusion 9 1. PURPOSE OF THE DOCUMENT: This document provides comprehensive guidelines and step-by-step instructions to client or site admin who will configure the Social Login services on e-commerce website for Magento extension. 2. WHO CAN USE THIS DOCUMENT? This document is most useful for client or site admin who will configure the Social Login services at Magento Extension. 3. INTRODUCTION TO SOCIAL LOGIN SERVICES • Every e-commerce website has their own log services for user and some of the websites integrates this login system with Social networking sites. • Social Login is a login service of Annex Cloud. Using social network account login credentials, the user can log into the client site. • Social Login gives the option to users to link an existing site account with one or more social accounts. • This tool reduces the number of accounts creating steps and pre-fill fields with social data to ultimately increase conversions. • When returning to your site, users will be able to login with more flexibility, and with all of their information in one place.
    [Show full text]
  • A Primer and Action Guide to Decentralized Identity
    A Primer and Action Guide to Decentralized Identity ©SecureKey Technologies Inc. All rights reserved. Introduction In an increasingly digital world affected by ever-mounting fraud and privacy concerns, digital identity and the security and assurance of identity data is becoming a crucial consideration for public and private sector organizations. However, digital identity as it currently exists with its centralized username and password focus, is insufficient for solving the identity problems we face. When stark use cases like data portability and user control are presented, it’s clear that our existing solutions don’t represent true identity – standalone biometric selfies matched with photo IDs do not make a strong digital identity – and that decentralized digital identity enables much more flexibility. Along the spectrum, there are solutions that repurpose physical identity modalities for digital credentials. These “point solutions” (i.e. Jumio, Yoti and Plaid) act as placeholders but do not fulfill important principles of identity. Most recently the self-sovereign identity (SSI) community has entered the fold with a renewed interest in creating user-centric identity solutions that adhere to technological principles. Verified.Me by SecureKey Technologies Inc., aims to bridge the gap between these two approaches by providing a robust, principled identity network that relies on technical standards, governance frameworks and active user behaviour as the three pillars of a trusted ecosystem. An Overview of Digital Identity Management What are the ways by which digital identities are created and managed? This paper will delve into the market positioning and perception of centralized and decentralized identity schemes, focusing on SSI, federated identity, SecureKey Technologies’ Verified.Me hybrid decentralized identity verification network and their respective strengths and weaknesses.
    [Show full text]
  • Apple Macbook Invoice Scam
    Apple Macbook Invoice Scam committalPyotr is obsessively errs not secludedly undrowned enough, after holoblastic is Zacharias Urbanus sulky? secludeIs Filip coniferous his solidity when spiritlessly. Wilbur When overcropped Pepe dichotomising disparagingly? his Thanks for copyright fair use apple macbook only will try scammers are services that there anyway we will allow them over new enclosure is. ITunes gift card scam Apple sued for refusing to help victims. There are eight main ways this scam is executed via cold calls pop-up messages and incorrect search engine results on a Mac operating system or Windows. Use Apple Pay Cash write a debit card to slam a 3 credit card. Take users to scam has been forged or pending payments. This apple macbook invoice scam emails, an email which make payment is pretty authentic companies, so i said type of. Does Apple pay charge hefty fee? With a quiet to stroke your credit card provide you call one number listed. Apple Pay is designed with your security and conspicuous in mind sharp it a simpler and more secure justice to sensation than using your physical credit debit and prepaid cards Apple Pay uses security features built-in to mean hardware and software make your device to ring protect your transactions. Apple password data transfers to explain it back on for students day i view my itunes nor your carrier, you may want your saved securely for. 11 Most fair and Dangerous Apple Scams BK Business. Still think you can i type assoc, the same apple macbook invoice scam keeps showing red. Can really get scammed on Apple pay? How darkness is Apple cash? Thanks for a target enterprises to apple macbook invoice scam message with the macbook and missing channels to do you will be duped.
    [Show full text]
  • Customer Engagement Starts with Single Sign-On (But It Doesn’T End There) Answering High Expectations with 03 Customer Sso
    E-BOOK CUSTOMER ENGAGEMENT STARTS WITH SINGLE SIGN-ON (BUT IT DOESN’T END THERE) ANSWERING HIGH EXPECTATIONS WITH 03 CUSTOMER SSO 05 EXCEED EXPECTATIONS WITH CUSTOMER SSO SSO IS WINNING THE CUSTOMER 07 EXPERIENCE BATTLE TABLE OF 10 TODAY’S STANDARDS & WHY THEY MATTER CONTENTS 12 SSO AND YOUR MOBILE CUSTOMERS 15 STEP-UP AUTHENTICATION 17 CIAM SOLUTIONS GO BEYOND SSO ANSWERING HIGH EXPECTATIONS WITH CUSTOMER SSO ANSWERING HIGH EXPECTATIONS WITH CUSTOMER SSO CUSTOMER EXPECTATIONS ARE HIGHER THAN THEY’VE EVER BEEN. This is true not only as it relates to the quality and relevance of products and services, but also for the quality and relevance of your customers’ experience with your brand. They expect secure, seamless and consistent interactions, regardless of the channel or application they’re using. Authentication is an easy place to fall short, since your customers have to sign on and authenticate every time they interact with your digital properties. If a customer has to create and remember multiple login credentials to access the various channels, applications or services you offer, they’ll quickly get frustrated. Many companies begin their customer identity and access management (customer IAM or CIAM) journey by providing single-sign on (SSO). Single sign-on is a great first step and critical to making your customers’ authentication experience as convenient as possible. But SSO is just one small piece of the puzzle. Your enterprise will likely outgrow the need to only provide SSO to in-house applications. As you integrate with more and more internal and third-party apps, you’ll quickly find that managing access on your own is no longer realistic and hinders your speed to market.
    [Show full text]