Sign in with Meta (Facebook)
How to register Curupira in the Meta App Dashboard so your tenant's users can sign in with Facebook.
Portal: developers.facebook.com/apps → Create app.
| Curupira detail | Value |
|---|---|
| Type | OAuth2, Facebook Login v21.0 (no id_token; identity from Graph GET /me) |
| Callback URL to register | https://auth.curupira.api.br/sso/meta/callback |
| Default scopes | email public_profile |
:::warning Plan ahead — App Review
Meta requires Business Verification + App Review before the email permission works for public
(non-test) users. During development it works immediately for app roles (admins/developers/testers)
— enough to test before going live.
:::
1 · Create the app
Create app → choose a type that offers Facebook Login (e.g. Consumer). Set the App name and Contact email.
2 · Add the Facebook Login product
Add product → Facebook Login → Set up (Web). Then under Facebook Login → Settings:
| Field | What to put |
|---|---|
| Valid OAuth Redirect URIs | https://auth.curupira.api.br/sso/meta/callback (paste exactly) |
| Client OAuth login | On |
| Web OAuth login | On |
Save changes.
3 · App settings → Basic
Set the App icon, Privacy Policy URL (https://curupira.api.br/privacy), Terms of Service
URL (https://curupira.api.br/terms), and App domain (curupira.api.br). Copy the App ID
and App Secret (click Show).
4 · Permissions & App Review
Under App Review → Permissions and Features, the email and public_profile permissions must be
granted. public_profile is usually default; email requires App Review + Business Verification
for public use. While the app is in Development mode, only app roles you add under App Roles →
Roles can complete login.
5 · Add the connection in Curupira
In the admin dashboard → SSO Connections, choose your tenant and Add SSO Connection:
- Provider: Meta (Facebook)
- Client ID: the App ID from step 3
- Client Secret: the App Secret from step 3 (stored encrypted, never shown again)
- Scopes: leave blank to use the defaults (
email public_profile) - Enabled: on
Then test (as an app admin/tester if not yet reviewed) at
https://auth.curupira.api.br/sso/meta/authorize?tenant=<your-tenant-slug>.
:::note Account linking If Meta returns an email that matches an existing password account, sign-in is refused — sign in with your password first, then connect SSO from your account settings. A brand-new email creates an SSO-only user automatically. :::
Checklist
- App created with Facebook Login product added
- Valid OAuth Redirect URI
https://auth.curupira.api.br/sso/meta/callback(exact) + saved - Client/Web OAuth login On
- Basic settings: icon, Privacy + Terms URLs, app domain
- App ID + App Secret copied
-
emailplan: test via app roles now, App Review + Business Verification for public - Entered in SSO Connections