OAuth Provider Setup
Follow these steps if you have not created a Google OAuth client yet.
- Create a Google Cloud account and project if you have not already done so.
- Configure your OAuth consent screen if you have not already done so. More info
- Go to the Google Credentials page for your application. Click on CREATE CREDENTIALS and then select OAuth Client ID.
- Select Web Application as the application type (regardless of if it is a mobile or non-web application) and enter a name for your OAuth client.
- Copy-paste the Redirect URI from the Dashboard into your OAuth configuration under the Authorized redirect URIs section.
- Click create to save the configuration.
- Optional: If you want the Stytch SDK to support Google One Tap, add your application's URI as an Authorized JavaScript Origin. Read more about One Tap.
Follow these steps if you already have an existing Google OAuth client.
- Go to the Google Credentials page for your application. You should see your OAuth client under the OAuth 2.0 Client IDs section.
- Click on the OAuth client to edit its configuration.
- Copy-paste the Redirect URI from the Dashboard into your OAuth configuration under the Authorized redirect URIs section.
- Click to save the configuration.
- Optional: If you want the Stytch SDK to support Google One Tap, add your application's URI as an Authorized JavaScript Origin. Read more about One Tap.
Amazon
Follow these steps if you have not created a Amazon OAuth client yet.
- Navigate to Login with Amazon OAuth Applications. For more information, check out Amazon's Login With Amazon guide here.
- Click Create a New Security Profile with your application name, description, and privacy notice URL. Then click the gear icon and select web settings for your security profile.
- Copy-paste the Redirect URI from the Dashboard into the Allowed Return URLs section by clicking Edit.
Follow these steps if you already have an existing Amazon OAuth client.
- Navigate to Login with Amazon OAuth Applications.
- Click the gear icon and select web settings for your security profile.
- Navigate to web settings for your application.
- Copy-paste the Redirect URI from the Dashboard into the Allowed Return URLs section by clicking Edit.
Apple
If you don’t already have an Apple Developer account with an app set up, begin at Step 1. If you already have an account and an App ID, skip ahead to Step 5.
- Create an Apple Developer account if you have not already done so. You will need an Apple ID with two-factor authentication turned on.
- Log in to your App Store Connect account with your Apple ID.
- In the developer portal, go to your Identifiers page. Click the blue plus sign next to the "Identifiers" header to create a new identifier. Register this identifier as an App ID and click Continue. Then, select the type App and click Continue.
- Create a description for this App ID that allows you to identify it easily, and a bundle ID that’s a reverse-domain style string. For example, if your domain is yourcompany.com, and your app is called your app, your reverse-domain bundle ID should be com.yourcompany.yourapp. Under the Capabilities section, check the box for "Sign in with Apple" and make sure that “Enable as a primary App ID” is selected. Click Continue and then Register to create your App ID.
- Navigate to the Identifiers page and click the blue plus sign next to the "Identifiers" header. Register this identifier as a Service ID and click Continue.
- Create a description for this Service ID that allows you to identify it easily, and an Identifier that’s a reverse-domain style string (e.g. com.yourcompany.yourservice). The identifier must be different from any identifier you’ve used for a Service ID or App ID in the past. Click Continue, and if everything looks good on the next screen, click Register.
- Upon registering your new Service ID, you will be taken back to your developer portal's Service IDs list. Click on the Service ID that you just created. Enable "Sign in with Apple" and click Configure.
- Select the relevant App ID for the Primary App ID field. Enter a list of domains and subdomains for your app in the "Website URLs > Domains and Subdomains" section. These should contain just the domain, not the “https://” in front of it (e.g. just "example.com"). Enter all domains that your app will redirect to here.
- Finally, in the "Website URLs > Return URLs" section, copy and paste the Redirect URI from the Dashboard. When you're finished, click Done, then Continue, then Save.
Bitbucket
Follow these steps if you have not created a Bitbucket OAuth client yet.
- Navigate to Bitbucket Workspace Applications. For more information, check out Bitbucket's Creating an OAuth App guide here.
- Click OAuth consumers under Apps and features on the left navigation.
- Click Add consumer with your application name.
- Copy-paste the Redirect URI from the Dashboard into the Callback URL.
- Select at least Account Email and Read permissions.
Follow these steps if you already have an existing Bitbucket OAuth client.
- Navigate to Bitbucket Workspace Applications.
- On the application you'd like to use click the three dots on the right-hand side and press edit.
- Copy-paste the Redirect URI from the Dashboard into the Callback URL.
Coinbase
Follow these steps if you have not created a Coinbase OAuth client yet.
- Navigate to your OAuth Applications. For more information, check out Coinbase's Sign In with Coinbase guide.
- Click New OAuth2 Application with your application name, URL, description, and icon.
- Copy-paste the Redirect URI from the Dashboard into the Permitted Redirect URLs section.
- Click yes or no to each of the remittance questions and accept the terms and conditions.
- Click Create Application.
Follow these steps if you already have an existing Coinbase OAuth client.
- Navigate to your OAuth Applications.
- Click on the application you'd like to use and click Edit.
- Copy-paste the Redirect URI from the Dashboard into the Permitted Redirect URLs section and save.
Discord
Follow these steps if you have not created a Discord OAuth client yet.
- Navigate to Discord OAuth Applications. For more information, check out Discord's Creating an OAuth App guide here.
- Create a New Application with your application name. Then navigate to OAuth2 > General in the left hand sidebar.
- Copy-paste the Redirect URI from the Dashboard into the Redirect section by clicking Add Redirect.
Follow these steps if you already have an existing Discord OAuth client.
- Navigate to Discord OAuth Applications.
- Click on the application you'd like to use and press edit.
- Navigate to OAuth2 > General for your application.
- Update the Redirects by copy-pasting the Redirect URI from the Dashboard.
Follow these steps if you have not created a Facebook OAuth client yet.
- Navigate to your Facebook (Meta) applications.
- Click Create App, choose Business, Consumer, Gaming, or None from the app type list.
- Click Next, fill out the details and click Create app.
- In the list of products, find Facebook Login and click Set up.
- Ignore the quickstart menu. Instead on the left pane under Facebook Login, click Settings.
- Copy-paste the Redirect URI from the Dashboard into the list of Valid OAuth Redirect URIs. Fill in remaining fields how you see fit. Then click Save changes in the bottom right corner.
Follow these steps if you already have an existing Facebook OAuth client.
- Navigate to your Facebook (Meta) applications.
- Click on the application you'd like to use.
- In the list of products, find Facebook Login and click Set up.
- On the left pane, under Facebook Login, click Settings.
- Copy-paste the Redirect URI from the Dashboard into the list of Valid OAuth Redirect URIs. Fill in remaining fields how you see fit. Then click Save changes in the bottom right corner.
Figma
Follow these steps if you have not created a Figma OAuth client yet.
- Navigate to Figma Workspace Applications. For more information, check out Figma's Authentication guide here.
- Create a new app with your application name, url, and logo.
- Copy-paste the Redirect URI from the Dashboard into the Callbacks section by clicking Add callback.
- Save your app.
- Copy the Client ID and Client Secret - this is the only time you can save the client secret for your app.
Follow these steps if you already have an existing Figma OAuth client.
- Navigate to Figma Workspace Applications.
- Click edit for your application.
- Copy-paste the Redirect URI from the Dashboard into the Callbacks section by clicking Add callback.
GitHub
Follow these steps if you have not created a Github OAuth client yet.
- Navigate to Github OAuth Applications. For more information, check out Github's Creating an OAuth App guide here.
- Click New OAuth App or Register a new application depending on if you have other applications or not.
- Copy-paste the Redirect URI from the Dashboard into the Authorization callback URL field Fill in remaining fields how you see fit.
Follow these steps if you already have an existing Github OAuth client.
- Navigate to Github OAuth Applications. If you're using an organization OAuth Application, navigate to the organization's Developer Settings tab. Note: this requires admin privileges.
- Click on the application you'd like to use.
- Copy-paste the Redirect URI from the Dashboard into the Authorization callback URL field.
Gitlab
Follow these steps if you have not created a Gitlab OAuth client yet.
- Navigate to Gitlab OAuth Applications. For more information, check out GitLab's Creating an OAuth App guide here.
- Create a New Application with the name, redirect uri, and desired scopes. You must include the openid, email, and profile scopes.
- Copy-paste the Redirect URI from the Dashboard into the Redirect URI field. Fill in remaining fields how you see fit.
Follow these steps if you already have an existing Gitlab OAuth client.
- Navigate to Gitlab OAuth Applications.
- Click on the application you'd like to use and press edit.
- Copy-paste the Redirect URI from the Dashboard into the Redirect URL. Under Scopes, make sure openid, email, and profile are selected.
Follow these steps if you have not created a LinkedIn OAuth client yet.
- Navigate to LinkedIn OAuth Applications. For more information, check out LinkedIn's Creating an OAuth App guide here.
- Click Create app with your application name. Then navigate to Auth in the application menubar.
- Copy-paste the Redirect URI from the Dashboard into the Authorized redirect URLs for your app section by clicking the pencil icon.
Follow these steps if you already have an existing LinkedIn OAuth client.
- Navigate to LinkedIn OAuth Applications.
- Click on the application you'd like to use.
- Navigate to Auth in the application menubar.
- Update the Authorized redirect URLs for your app by copy-pasting the Redirect URI from the Dashboard.
Microsoft
Follow these steps if you have not created a Microsoft OAuth client yet.
- Create a Microsoft Azure account if you have not already done so.
- Navigate to Azure Active Directory to create a Microsoft application.
- Click New registration.
- Enter a name for your OAuth client.
- Select "Accounts in any organizational directory (Any Azure AD directory - Multitenant) and personal Microsoft accounts (e.g. Skype, Xbox)".
- Under the Redirect URI section, select Web and then copy-paste the Redirect URI from the Dashboard into the URI field.
- Click Register to save the configuration.
Follow these steps if you already have an existing Microsoft OAuth client.
- Navigate to Azure Active Directory and select your Microsoft application.
- Ensure that the Supported account types section is set to "All microsoft account users". If it’s not, navigate to the Manifest tab, set the "signInAudience" value to "AzureADandPersonalMicrosoftAccount", and save.
- In your OAuth client configuration, select the link next to the Redirect URIs section. Then select Add a platform and finally select Web.
- Copy-paste the Redirect URI from the Dashboard into the URI field.
- Click Configure to save the URI.
Salesforce
Follow these steps if you have not created a Salesforce OAuth client yet.
- Navigate to your Applications or by going to Setup > App Manager. For more information, check out Salesforce's Authentication guide here.
- Create a New Connected App with your application name and contact email and phone number.
- Toggle Enable OAuth Settings in the API menu
- Copy-paste the Redirect URI from the Dashboard into the Callback URL section.
- Make sure to include at least Access the identity URL service (id, profile, email, address, phone) and Access unique user identifiers (openid) scopes.
- Check the Enable Client Credentials Flow checkbox.
Follow these steps if you already have an existing Salesforce OAuth client.
- Navigate to your project by clicking your application from your organizations app manager page.
- Copy-paste the Redirect URI from the Dashboard into the Callback URL section by clicking Enable OAuth Settings.
Slack
Follow these steps if you have not created a Slack OAuth client yet.
- Navigate to Slack OAuth Applications. For more information, check out Slack's Creating an OAuth App guide here.
- Select Create New App and choose to create it From scratch. Enter desired App Name and Slack Workspace.
- You will be redirected to the configuration page for your new App. On the left-hand sidebar, navigate to OAuth & Permissions.
- Scroll down to Redirect URLs and click Add New Redirect URL. Copy-paste the Redirect URI from the Dashboard, then click Save URLs.
- In the Scopes section under User Token Scopes add at least the following scopes: users:read, users:read.email.
Follow these steps if you already have an existing Slack OAuth client.
- Navigate to Slack OAuth Applications and select the OAuth App you will be using.
- On the left-hand sidebar, navigate to OAuth & Permissions.
- Scroll down to Redirect URLs and click Add New Redirect URL. Copy-paste the Redirect URI from the Dashboard, then click Save URLs.
- In the Scopes section under User Token Scopes add at least the following scopes: users:read, users:read.email.
Snapchat
Follow these steps if you have not created a Snapchat OAuth client yet.
- Navigate to Snapchat Applications. For more information, check out Snapchat's Authentication guide here.
- Create a New Project with your application name.
- Toggle Login Kit on at the bottom of the page. Select at least Display Name and Bitmoji Avatar.
- Copy-paste the Redirect URI from the Dashboard into the Redirect URI section and click Add URI.
Follow these steps if you already have an existing Snapchat OAuth client.
- Navigate to your project by clicking your application from your organizations manage page.
- Copy-paste the Redirect URI from the Dashboard into the OAuth Redirect URLs section by clicking Add.
Spotify
Follow these steps if you have not created a Spotify OAuth client yet.
- Navigate to your Spotify Applications. For more information, check out Spotify's Creating an OAuth App guide.
- Click Create an App with your application name and description. Then navigate to Edit settings in the application menubar.
- Copy-paste the Redirect URI from the Dashboard into the Redirect URLs section.
Follow these steps if you already have an existing Spotify OAuth client.
- Navigate to your Spotify Applications. Click on the application you'd like to use.
- Navigate to Edit settings in the application menubar.
- Copy-paste the Redirect URI from the Dashboard into the Redirect URLs section.
TikTok
Follow these steps if you have not created a TikTok OAuth client yet.
- Navigate to your TikTok Applications. For more information, check out TikTok's Authentication guide.
- Connect an app with your name, category, app icon, and description. Select your platforms.
- On the left-hand sidebar Add products, including at least Login Kit and TikTok API.
- Add links to your terms of service and privacy policy pages.
- Under Scopes we require at least user.info.basic. Add any additional scopes needed for your application.
- Copy-paste the Redirect URI from the Dashboard into the Redirect domain in the Login Kit section.
- Save changes for your app configuration, and then Submit for review. TikTok usually reviews new apps in 12-36 hours.
Follow these steps if you already have an existing TikTok OAuth client.
- Navigate to your application's manage pane, by clicking your application.
- Copy-paste the Redirect URI from the Dashboard into the Redirect domain in the Login Kit section.
Twitch
Follow these steps if you have not created a Twitch OAuth client yet.
- Navigate to your Twitch Console. For more information, check out Twitch's Authentication guide.
- Register Your Application with your application name.
- Copy-paste the Redirect URI from the Dashboard into the OAuth Redirect URLs section by clicking Add.
Follow these steps if you already have an existing Twitch OAuth client.
- Navigate to your application's manage pane, available in the right hand side bar of Twitch under Applications > Name of your application.
- Copy-paste the Redirect URI from the Dashboard into the OAuth Redirect URLs section by clicking Add.
Follow these steps if you have not created a Twitter OAuth client yet.
- Signup for the Twitter API.
- Navigate to your Twitter Dashboard. For more information, check out Twitter's Authentication guide.
- Create App with your application name.
- Under User authentication settings, click Set up.
- Enable OAuth 2.0 Authentication by selecting Web App, Automated App or Bot.
- Copy-paste the Redirect URI from the Dashboard into the Callback URI / Redirect URL section.
- Add your website, terms of service, and privacy policy links, and click Save.
Follow these steps if you already have an existing Twitter OAuth client.
- Navigate to your application's User authentication settings, available in the right hand side bar of Twitter under Projects & Apps > Name of your application.
- Under User authentication settings, click Edit.
- Enable OAuth 2.0 Authentication by selecting Web App, Automated App or Bot.
- Copy-paste the Redirect URI from the Dashboard into the Callback URI / Redirect URL section.
- Add your website, terms of service, and privacy policy links, and click Save.
Yahoo
Follow these steps if you have not created a Yahoo OAuth client yet.
- After creating a Yahoo developer account, you can create a Yahoo OAuth application here. For more information, check out Yahoo's guide to receive your OAuth 2.0 credentials here.
- Create a New App with your application name and optional description and homepage URL.
- Copy-paste the Redirect URI from the Dashboard into the Redirect URLs section.
- Make sure to include OpenID Connect Permissions and ensure both Email and Profile are checked.
Follow these steps if you already have an existing Yahoo OAuth client.