Configuring Facebook authentication settings

You can configure Brightspot to allow visitors to authenticate with your site via Facebook. In order to complete this configuration, the following prerequisite steps are required:

• Creating a Facebook app and adding a Facebook Login product (both performed within Facebook's console).
• Adding a Facebook callback endpoint. For details, see Adding a Facebook callback endpoint.
• Adding a Facebook disconnect endpoint. For details, see Adding a Facebook disconnect endpoint.
• Mapping the Facebook app to Brightspot. For details, see Creating a Facebook service.

To configure Facebook authentication settings:

1. Ensure that you have already configured a Facebook app and added the Facebook Login product as described in the following steps.
   
   1. Navigate to your Facebook application and click Add Product in the left rail. Add Facebook Login as a product option.
   2. In Facebook Login settings, ensure Client OAuth Login, Enforce HTTPS, and Use Strict Mode for Redirect URIs are enabled.
   3. In Valid OAuth Redirect URIs, add the absolute URL for the callback endpoint you set up for the site. (Note: Must be HTTPS protocol). For details on this callback, see Adding a Facebook callback endpoint.
   4. Save the product changes.
2. Click menu > Admin > Sites & Settings.
3. In the Sites widget, select the site for which you want to configure these settings, or select Global to configure these settings for all sites.
4. Click search, located to the left of more_horiz, and type Authentication Settings.
5. From the Authentication Settings list, select Create New.
6. Under Name, give these settings a name (for example, Facebook Auth).
7. Under Authentication Providers, click add_circle_outline Add Item.
8. Click search to open the content picker, and then from the Create list in the bottom left, select Facebook and click New.
9. Enter an internal name for this asset. Brightspot uses this name internally, such as in the search panel and recent activity widget. This name is not visible to visitors to your site.
10. Under Facebook Service, enter your Facebook service. For details, see Creating a Facebook service.
11. Under Callback Endpoint, select the endpoint you configured for these Facebook authentication settings. For details, see Adding a Facebook callback endpoint.
12. Under Disconnect Endpoint, select the endpoint you configured for these Facebook authentication settings. For details, see Adding a Facebook disconnect endpoint.
    
    Note

    Once you slot in the Facebook disconnect endpoint into this field, Brightspot displays a new note at the top of the content edit page that includes the de-authorize URL and delete URL. Copy and paste these URLs into the login settings in the developer console for your Facebook app. For details, see deleting Facebook authentication records.
13. Under Login Session Expiration, set the time (in seconds) until a visitor must log in again. This field defaults to 86,400 seconds (24 hours).
14. Toggle on Should Validate Cross-Site Request Forgery to protect against malicious requests being made to a site the visitor is logged in to. In order to utilize this, the cookie [bsp-oauth-csrf-0000018c-63be-d739-a39e-63be047b0000] must be allowed and forwarded by CDNs serving the website.
15. Click Save.
16. Click Back.
17. From the content picker, select the Facebook authentication provider you just created.
18. Click Save.

Once you have configured Facebook authentication settings, you can add Facebook as an authentication option to a login module, which can be used on a login page to help your front-end visitors authenticate with your site.