Store Settings
Authentication configuration
Authentication configuration lets your customers log in to your store using email magic links or their existing social media accounts. This makes checkout faster and more convenient, which can help increase sales.
Why flexible sign-in matters
Customers appreciate quick, easy sign-in options:
- Faster checkout - No need to create a new password
- Better conversion - Fewer abandoned carts at login
- Trusted brands - Customers feel secure using familiar providers
- No social account required - Email magic links work for everyone, even without a social media account
- Less friction - One-click sign-in for returning customers
Grow your sales
Stores that offer flexible sign-in options typically see higher conversion rates because customers don't need to remember another password.
Accessing authentication settings
- From your admin, go to Settings > Authentication Configuration
- Under Email Authentication, you'll see the toggle Enable Magic Link Sign-In, plus settings for Facebook, Google, and Microsoft
- Configure the providers you want to offer
Setting up email authentication (Magic Links)
Email magic links let customers sign in by entering their email address and clicking a secure link sent to their inbox — no password needed.
Prerequisite
Email authentication requires your email configuration to be set up first. Magic link emails are sent using your configured email provider.
Enabling magic links
- Go to Settings > Authentication Configuration
- Toggle on Enable Magic Link Sign-In
- Save your changes
How it works for customers
- Customer visits your store's sign-in page
- They enter their email address
- A secure sign-in link is sent to their inbox
- They click the link to sign in instantly
Link expiry
Magic links expire after 24 hours for security. If a customer's link has expired, they can request a new one by entering their email address again.
Setting up Facebook Login
To enable Facebook Login, you'll need to create a Facebook App:
- Go to Facebook for Developers
- Create a new app and enable Facebook Login
- Copy your App ID and App Secret
- In your Hanut.io admin, enter these values in the Facebook section
- Copy the OAuth Redirect URL shown in Hanut.io
- Add this redirect URL to your Facebook App settings under Valid OAuth Redirect URIs
- Save your changes
Your customers can now log in with Facebook.
Setting up Google Login
To enable Google Login, you'll need to create a Google Cloud project:
- Go to Google Cloud Console
- Create a new project (or select an existing one) and configure the OAuth consent screen
- Create OAuth 2.0 Client ID credentials for a Web application
- Copy your Client ID and Client Secret
- In your Hanut.io admin, enter these values in the Google section
- Copy the OAuth Redirect URL shown in Hanut.io
- Add this redirect URL to your Google OAuth settings under Authorized redirect URIs
- Save your changes
Your customers can now log in with Google.
Setting up Microsoft Login
To enable Microsoft Login (Entra ID):
- Go to Microsoft Azure Portal
- Navigate to Azure Active Directory > App registrations
- Create a new registration
- From your app's Overview page, copy the Directory (tenant) ID
- Copy your Application (client) ID and create a Client Secret
- In your Hanut.io admin, enter the Tenant ID, Client ID, and Client Secret in the Microsoft section
- Copy the OAuth Redirect URL shown in Hanut.io
- Add this redirect URL to your Microsoft app under Redirect URIs
- Save your changes
Your customers can now log in with Microsoft.
Important
Make sure you configure the OAuth redirect URLs exactly as shown in your admin. Any mismatch will prevent customers from logging in.
Testing vs production credentials
Most OAuth providers let you create separate credentials for testing and production:
- Test credentials - Use while your store is in test mode
- Production credentials - Switch to these when you go live
This keeps test data separate from real customer accounts.
Tip
Test all sign-in methods thoroughly before going live. Try logging in from different devices and browsers to make sure everything works smoothly.
Security considerations
- Keep secrets private - Never share your Client Secrets publicly
- Update regularly - If a secret is compromised, generate a new one immediately
- Monitor logins - Review authentication activity periodically
- Use HTTPS - OAuth and magic links require secure connections (handled automatically by Hanut.io)
Next steps
- Configure store settings for your identity
- Set up email for customer communications and magic links
- Configure payment gateway to accept payments