Ways to sign in

Your app's front door. This screen lists the sign-in options you can offer — Google, GitHub, Apple, email and the rest — and which of them are currently switched on for your users.

A searchable list of sign-in providers, some badged "popular", with a panel on the right showing the settings for the selected one.

Choosing what to offer

Pick the ones your users already have. A holiday-rental site should probably offer Google and Apple; a tool for engineers is better off with GitHub. Every extra option on a sign-in page is one more decision for someone who only wanted to get in, so two or three good choices beat eight.

The common ones are badged so you are not scrolling a long list to find them.

Switching one on

Select a provider and the panel shows what it needs. In every case it is the same two things: an identifier for your app, and a secret, both issued by the provider — Google, GitHub, whoever. You get them by registering your app with that provider, which happens on their website, not here.

The secret itself is not stored on this screen. It lives with your secrets, and this screen points at it. That is why the values can differ between your workspace and your live app without you configuring anything twice.

Set each provider up separately for your workspace and your live app. Providers usually refuse to sign anyone in if the address they are handed is not one they were told about, and your workspace and your live app have different addresses.

Where to go next

• Users — the people who signed in, once they have.
• Permissions — what each of them may then do.
• Secrets — where the provider secrets actually live.