Store Settings

Authentication configuration

Authentication configuration lets your customers log in to your store using email magic links or their existing social media accounts. This makes checkout faster and more convenient, which can help increase sales.


Why flexible sign-in matters

Customers appreciate quick, easy sign-in options:

  • Faster checkout - No need to create a new password
  • Better conversion - Fewer abandoned carts at login
  • Trusted brands - Customers feel secure using familiar providers
  • No social account required - Email magic links work for everyone, even without a social media account
  • Less friction - One-click sign-in for returning customers

Grow your sales

Stores that offer flexible sign-in options typically see higher conversion rates because customers don't need to remember another password.


Accessing authentication settings

  1. From your admin, go to Settings > Authentication Configuration
  2. Under Email Authentication, you'll see the toggle Enable Magic Link Sign-In, plus settings for Facebook, Google, and Microsoft
  3. Configure the providers you want to offer

Email magic links let customers sign in by entering their email address and clicking a secure link sent to their inbox — no password needed.

Prerequisite

Email authentication requires your email configuration to be set up first. Magic link emails are sent using your configured email provider.

  1. Go to Settings > Authentication Configuration
  2. Toggle on Enable Magic Link Sign-In
  3. Save your changes

How it works for customers

  1. Customer visits your store's sign-in page
  2. They enter their email address
  3. A secure sign-in link is sent to their inbox
  4. They click the link to sign in instantly

Link expiry

Magic links expire after 24 hours for security. If a customer's link has expired, they can request a new one by entering their email address again.


Setting up Facebook Login

To enable Facebook Login, you'll need to create a Facebook App:

  1. Go to Facebook for Developers
  2. Create a new app and enable Facebook Login
  3. Copy your App ID and App Secret
  4. In your Hanut.io admin, enter these values in the Facebook section
  5. Copy the OAuth Redirect URL shown in Hanut.io
  6. Add this redirect URL to your Facebook App settings under Valid OAuth Redirect URIs
  7. Save your changes

Your customers can now log in with Facebook.


Setting up Google Login

To enable Google Login, you'll need to create a Google Cloud project:

  1. Go to Google Cloud Console
  2. Create a new project (or select an existing one) and configure the OAuth consent screen
  3. Create OAuth 2.0 Client ID credentials for a Web application
  4. Copy your Client ID and Client Secret
  5. In your Hanut.io admin, enter these values in the Google section
  6. Copy the OAuth Redirect URL shown in Hanut.io
  7. Add this redirect URL to your Google OAuth settings under Authorized redirect URIs
  8. Save your changes

Your customers can now log in with Google.


Setting up Microsoft Login

To enable Microsoft Login (Entra ID):

  1. Go to Microsoft Azure Portal
  2. Navigate to Azure Active Directory > App registrations
  3. Create a new registration
  4. From your app's Overview page, copy the Directory (tenant) ID
  5. Copy your Application (client) ID and create a Client Secret
  6. In your Hanut.io admin, enter the Tenant ID, Client ID, and Client Secret in the Microsoft section
  7. Copy the OAuth Redirect URL shown in Hanut.io
  8. Add this redirect URL to your Microsoft app under Redirect URIs
  9. Save your changes

Your customers can now log in with Microsoft.

Important

Make sure you configure the OAuth redirect URLs exactly as shown in your admin. Any mismatch will prevent customers from logging in.


Testing vs production credentials

Most OAuth providers let you create separate credentials for testing and production:

  • Test credentials - Use while your store is in test mode
  • Production credentials - Switch to these when you go live

This keeps test data separate from real customer accounts.

Tip

Test all sign-in methods thoroughly before going live. Try logging in from different devices and browsers to make sure everything works smoothly.


Security considerations

  • Keep secrets private - Never share your Client Secrets publicly
  • Update regularly - If a secret is compromised, generate a new one immediately
  • Monitor logins - Review authentication activity periodically
  • Use HTTPS - OAuth and magic links require secure connections (handled automatically by Hanut.io)

Next steps

Previous
Store configuration