Social Login
Let shoppers sign in and create an account with one click: Google, Apple, Facebook, Microsoft, X, LinkedIn, Amazon, PayPal, Twitch or Pinterest, or a passkey (Face ID, Touch ID, Windows Hello).
Check it fits your store
Questions about compatibility? Contact us.
Details
Magento Social Login lets shoppers sign in and register with supported provider accounts or passkeys. Add sign-in options to account pages, checkout, a store-wide popup or a CMS widget on Luma and Hyvä themes.
Magento Social Login providers and passkeys
Support Google, Apple, Facebook, Microsoft, X, LinkedIn, Amazon, PayPal, Twitch and Pinterest. Microsoft sign-in works with both Entra ID and personal accounts.
Shoppers can also use passkeys with Face ID, Touch ID, Windows Hello or Android fingerprint. An account dashboard suggestion invites customers to add a passkey on supported devices.
Choose where sign-in options appear
- Account pages: place buttons above or below the Sign In form and on the Create an Account page.
- Store-wide popup: open a sign-in dialog from the store's Sign In and Create an Account links on any page.
- Luma checkout: show options under the email field and in the checkout Sign In popup.
- Other checkout placements: use Hyvä Checkout or the Social Login Buttons component in Techimprovement One Step Checkout.
- Registered-customer checkout: show options in the Proceed to Checkout sign-in popup when checkout requires an account.
- CMS widget: place provider buttons through a widget.
Position the store sign-in popup in the center or at the top. It combines provider buttons, passkeys, email and password sign-in, account creation and password recovery, with Google reCAPTCHA v3 support.
The provider authentication window opens as a popup on computers and in the same window on phones and in-app browsers. After signing in, shoppers return to the same page or go to their account dashboard, depending on your setting.
Connect accounts and manage sign-in methods
Email-based account matching lets customers use several providers for one store account. You can limit automatic matching to provider-confirmed email addresses, with a one-time store-password confirmation otherwise.
In My Account > Sign-in Methods, customers can:
- Connect and disconnect provider accounts.
- Add, rename and remove passkeys.
- Request a link to set a password when they created their account through a provider.
Authentication safeguards
- Uses state, nonce and PKCE where the provider supports them.
- Verifies Apple and Microsoft ID token signatures.
- Accepts return addresses on your own domain only.
- Signs the Apple client secret with your key and renews it automatically.
- Provides admin messages and email notifications about Apple and other provider secret expirations.
Provider controls use buttons rather than links, so search engines do not crawl the sign-in addresses.
Adjust the design and review activity
Button Design settings include a live preview. Choose brand colors, light or dark styling, shape, size, grid or list layout, logos-only buttons, button text and an optional separator.
The interface supports high-contrast colors, visible focus and full keyboard operation. The store sign-in popup uses a native dialog and becomes a bottom sheet on phones.
Under Customers > Social Login Dashboard, review sign-ins, new and connected accounts, passkeys and failures by provider and day. The dashboard also shows recent activity and failure reasons. Each customer page includes a tab for connected accounts.
Compatibility and setup requirements
One package supports Luma, Luma-based themes, Hyvä themes and Hyvä Checkout on computers and phones. The same script runs under RequireJS on Luma and independently on Hyvä. Styles use plain CSS with custom properties, so no Tailwind rebuild is needed.
- Platform: Magento Open Source or Adobe Commerce 2.4.9.
- PHP: 8.3, 8.4 or 8.5 with ext-openssl and ext-intl.
- Hyvä themes: Hyvä Theme module 1.3 or later, using Hyva/default or a child theme.
- HTTPS: required by providers for live sites and by passkeys.
- Provider credentials: an app or client ID and secret from each provider you enable.
- Optional checkout integration: Techimprovement One Step Checkout 1.3.0 or later for the Checkout Builder component.
Edition options and included download
Choose the Community, Enterprise or Magento Cloud edition. The product includes the Social Login — Version 1.5.0 digital download; the download is not purchased separately.
Change Log
Version 1.5.0 – October 30, 2026
New
- Hyvä theme support, checked end to end on a Hyvä store view (Hyvä Theme module 1.3+, Hyva/default or a child theme) on computers and phones: provider buttons on the Sign In and Create an Account pages, the sign-in popup from the header's account menu (email sign-in, create an account, forgotten password, provider window), My Account > Sign-in Methods with passkeys (add, rename, remove), the passkey suggestion on the dashboard and the buttons in One Step Checkout (under the email field and in its Sign In popup). No Tailwind rebuild needed.
- README: Hyvä themes (layout handles, script, custom properties) and a robots.txt note for /sociallogin/.
Improved
- The provider buttons are elements with the sign-in address in data-tisl-url instead of links, so pages no longer contain crawlable links to sociallogin/oauth/start/… (sign-in pages, popup, widget, checkout and the Luma checkout's Knockout template). Same look and behaviour; templates customised with links keep working.
- Hyvä: on the Create an Account page the buttons are above the registration form, as on Luma (they were below the form, followed by the "or" separator).
- Hyvä: the header's account menu closes when its Sign In or Create an Account link opens the popup (it stayed open behind the popup), and closing the popup returns the focus to the account menu button.
- My Account > Sign-in Methods: a passkey's Rename and Remove stay together when the row is too narrow for them.
Fixed
- My Account > Sign-in Methods (sociallogin/account) gave an error page (HTTP 500) to visitors who were not signed in, for example after the session ended: the controllers relied on Magento's AccountInterface plugin, which returns nothing for typed controllers. Visitors now go to the sign-in page and come back afterwards; the account and passkey forms send them to the sign-in page as well.
- Buttons keep their brand colours while focused or pressed in themes that colour focused buttons.
Earlier versions (4)
Version 1.4.0 – October 27, 2026
New
- Setting Email and Password Sign-in in the Popup (general/popup_login_form): A Button that Opens the Form in the Popup (default), The Form Under the Sign-in Buttons or A Button to the Sign In Page. With the default, the Sign in panel shows the social buttons and "Sign in with email and password"; a click opens the form in the same popup.
- Google reCAPTCHA v3 in the popup: the sign-in, registration and password reset forms stay in the popup when reCAPTCHA v3 protects them. The popup renders an invisible widget, sends the token with the form (Magento checks it for the sign-in; sociallogin/ajax/register and sociallogin/ajax/forgot check it themselves) and shows the reCAPTCHA notice. Model\Captcha\ReCaptcha reaches Magento's reCAPTCHA services through a proxy, so the reCAPTCHA modules stay optional.
Improved
- "Create an account" opens the registration form in the popup also when reCAPTCHA v3 protects registration (setting Create an Account in the Popup). Forms protected by reCAPTCHA v2 or Magento's CAPTCHA still link to their pages, now with an outlined "Sign in with email and password" button instead of a dark link.
Fixed
- Links in the popup no longer take the theme's link colour: "Sign in with email and password" was purple text on a dark button, and the "Create an account" link tab was purple.
- Provider buttons now attach to the shared Alpine checkout layout, including Luma-based themes, in both the Checkout Builder's Social Login component and the Sign In panel. The earlier Hyvä layout remains supported through the same reusable handle without duplicate blocks.
- Hyvä customer-state updates use the authoritative private-content event instead of a stale browser-storage seed.
Version 1.3.2 – October 18, 2026
Fixed
- The provider's sign-in window (Google, Facebook, …) opens in the centre of the page on every screen. On a screen to the left of or above the main screen (negative screen coordinates) it opened at the edge of the page, centre right, because the position was cut at 0. The window now stays on the screen of the page.
Version 1.3.1 – October 18, 2026
New
- Techimprovement One Step Checkout on Hyvä themes (techimprovement/module-one-step-checkout-hyva 1.0): the buttons appear as the Social Login Buttons component of the Checkout Builder (setting Buttons Under the Email Field in the Checkout) and in the checkout's Sign In dropdown (setting Buttons in the Checkout Sign In Popups), as on the Luma checkout.
- Template buttons.phtml: block arguments default_heading (used when the Button Design settings have no heading) and heading_tag (h2 or p).
Version 1.3.0 – October 17, 2026
New
- Buttons in the sign-in popup that opens from Proceed to Checkout (mini cart and cart page) when guests cannot check out (Allow Guest Checkout = No, or downloadable items): Luma (a component of the popup) and Hyvä themes (copied above the form of the theme's popup). Signing in continues to the checkout. Setting Buttons in the Checkout Sign In Popups (formerly "Buttons in the Checkout Sign In Popup").
- Checkout with Multiple Addresses: the sign-in and registration pages show the buttons (tested).
Improved
- Sign-ins that start in the checkout or in its sign-in popups always continue to the checkout, also when After Signing In is set to the account dashboard (social providers and passkeys).
Reviews
Be the first to review Social Login
Reviews are written by customers with an account. Sign in to tell others how it works on your store.
