How it works

As already know the SSO module will allow users to login on your site via a social provider. Below a couple of cases how the module will handle the login and what it will do.

The Login process

1. The user clicks on of the social provider that are enabled provided by {exp:reinos_sso:login_links}
2. The user will redirect to the social provider and will be asked for his login.
3. When the user enters the correct credentials, the user will be redirect to the EE site
4. On the main EE site, the SSO module will check if the user exists.
5. If the user does not exists:
   1. if member registration has been disabled.
      1. an error will be showed
   2. if member registration has been enabled.
      1. there will be a new member profile created for the user
      2. and a connect link will be made between the social provider and the EE site.
6. If the user exists
   1. if the setting "Allow social login to merge with non social accounts" is set to no there will be shown an error on the screen and the user will be asked to enter a new email address.
   2. if the setting "Allow social login to merge with non social accounts" is set to yes the user will be logged in on the account that already exists on the EE site. When "Require a verified email to link an existing account" is on (default), this only happens when the provider verified the email address, otherwise the email_not_verified error is shown.
   3. if the user has an account, that is connected to a social provider, it will always login on the existing account.
7. Banned and pending members cannot log in, they get the account_banned or account_pending error. Available from v5.10.0

Errors are shown with the error tags.

Return URLs

Available from v5.10.0

The return and new_member_return params must be a relative URL or a URL on the domain of your site. Other URLs are replaced by the site index, so the login links cannot be used to send visitors to another website. Allow extra domains in your config.php:

$config['reinos_sso_allowed_redirect_hosts'] = ['shop.example.com'];

Logut

To logout use the regular EE tag {path='logout'} as mentions on the ExpressionEngine documentation site