Social Login for Magento 2

Let customers sign in and register with the accounts they already have. Qoliber Social Login adds 20 OAuth2 / OpenID Connect providers to the Magento storefront login, registration, and checkout — with first-class support for Hyvä themes, headless / GraphQL storefronts, Google One Tap, and popup sign-in.

🖼️ Screenshot — Frontend · Customer login page The social login button strip rendered beneath the standard login form (Luma theme).

Why it matters

• Higher registration conversion — remove the password barrier; customers tap one button.
• Fewer abandoned checkouts — optional social login directly on the checkout login step.
• No password to manage — accounts are created from the provider's verified profile.

Supported providers

Google	Facebook	Apple	Microsoft
LinkedIn	GitHub	GitLab	Bitbucket
Discord	Slack	Amazon	X (Twitter)
Reddit	Twitch	TikTok	Pinterest
LINE	PayPal

Built on three reusable strategies — OAuth2, OAuth2 + PKCE, and OpenID Connect — so adding a new provider is configuration, not custom code.

Key features

• Google One Tap — frictionless, self-rendering sign-in prompt for guests.
• Popup or inline — render buttons inline, or behind a "Login with…" popup modal.
• Account linking — link a social account to an existing customer by verified email; customers manage connections from My Account.
• Email-less providers handled — X (Twitter), Reddit and TikTok don't always return an email; the customer is shown a short confirmation form instead of failing.
• Hyvä-ready — dedicated, strict-CSP-compliant Hyvä templates.
• Headless / PWA — a GraphQL surface for PWA Studio and Hyvä Checkout.
• Security-first — HMAC-signed OAuth state, SSRF-guarded discovery, per-callback rate limiting, encrypted tokens at rest, optional provider-side token revocation on unlink.

Editions

Two metapackages — pick the one that matches your storefront theme:

Storefront	Install
Luma / default theme	qoliber/social-login
Hyvä theme	qoliber/social-login-hyva-suite

GraphQL/headless support is an optional add-on (qoliber/social-login-graphql) for both.

Next steps

1. Installation — Composer + enable.
2. Configuration — admin settings walkthrough.
3. Provider setup — create the OAuth apps and redirect URIs.
4. Advanced features — One Tap, popup, account linking, headless, CSP.
5. Troubleshooting.

Requirements

• Magento Open Source / Adobe Commerce 2.4.6 – 2.4.8
• PHP 8.1, 8.2, 8.3, 8.4, or 8.5
• HTTPS on the storefront (OAuth providers require secure redirect URIs)