CP Overview

On the CP page you can modify a couple of things.

Default settings

Logging settings

Name	Description
Logging	What should be logged. Options: `only errors`, `Everything`, `Nothing`

SSO settings

Name	Description
Membergroup	Assign new SSO users to a member group
Allow new SSO accounts	Allow login with a new email. For this new email the SSO module will create a new EE account
Allow social login to merge with non social accounts	Allow users to log in to existing ExpressionEngine email accounts that were created by EE itself, not by the SSO module. This way, a user can have an existing account and by logging in via the SSO module, they can access that existing account
Require a verified email to link an existing account	Only merge a social login into an existing account when the provider verified the email address. Google, Apple, Facebook, GitHub, LinkedIn, Discord, X, PayPal, Yahoo, Twitch, Slack, GitLab, Keycloak and Okta report this (OpenID Connect when the provider sends `email_verified`), Microsoft and Amazon do not. Turning this off lets anyone who can set an unverified email at a provider log in to the account with that email. Default: yes. Available from v6.0.0
Send new password per mail	Send the newly created password to the user only if the EE account was created. Existing accounts will not receive a new password
Send password when user disconnect	When enabled, a password is sent to the user when they disconnect their account
Remember me	Keep members logged in (1 year) after a social login, like the "remember me" checkbox of the login form. Default: yes. Available from v6.0.0
Sync profile picture	Sync the profile picture on every login, so it gets updated on every login. Needs an upload directory named `Avatars`
Email collect form	When the email is not given from the social site, you can use a template to collect the email. In the template you need at least this template code:

html

{exp:reinos_sso:email_collect_form}
    <input type="email" name="email"/>
    <input type="submit"/>
{/exp:reinos_sso:email_collect_form}

Select the template to use as the email collect form via the template dropdown.

Logs

The log page shows what the module logged, see the Logging setting. Available from v6.0.0:

Filter the logs on severity (error or notice), date and keyword, and choose the number of logs per page.
Select logs and delete them with the bulk action.
Export the filtered logs as CSV with Export logs.

Delete all logs deletes the logs of the current site.

Linked accounts

The linked accounts page lists which members are connected to which provider: the member, their email, the provider and the ID of the account at the provider. Available from v6.0.0:

Filter on a provider.
Search on the username, screen name or email of the member, or the provider ID.
Choose the number of accounts per page.

Member settings

Name	Description
Disable member registration	In order to use only SSO as registration/login option, you can disable the default EE member registration in the member settings

Provider settings

The providers page shows all providers per group (social and consumer, business and identity, developers and communities, legacy) with their status:

Status	Description
Enabled	The provider is enabled and all its settings are filled in
Missing settings	The provider is enabled, but a required setting is empty. A login with it fails, the page shows a warning
Off	The provider is disabled

Filter the providers on status, search on the name, or enable and disable several providers at once with the checkboxes. Click a provider to edit its settings; the edit page shows the callback URL to register at the provider. A setting from $config['reinos_sso_providers'] in config.php counts as filled in. The settings are per site. Available from v6.0.0