Tanur Social Login

Tanur Social Login is a lightweight WordPress social login plugin that allows users to sign in or register using Google, Facebook, and LinkedIn. The plugin integrates seamlessly with WordPress and WooCommerce, supporting login, registration, My Account, and checkout pages.

Designed for performance and simplicity, Tanur Social Login helps reduce registration friction, improve user experience, and increase conversions by enabling one-click social authentication without relying on third-party SaaS services.

Features

• Google, Facebook, and LinkedIn OAuth login.
• WooCommerce My Account, checkout, login, and registration integration.
• Default WordPress login page integration.
• Existing users are linked by verified provider ID or email address.
• New users are created with a generated secure password.
• One-time OAuth state tokens using WordPress transients.
• Same-site redirect validation with WordPress redirect helpers.
• Setup guide inside the WordPress admin.
• Copy-ready redirect URI fields for each provider.

User account creation and login

This plugin creates and logs in WordPress users because that is the primary function of a social login plugin. A visitor who successfully completes OAuth with an enabled provider can be matched to an existing WordPress user or created as a new WordPress user.

Existing accounts are linked by provider ID first. Email-based linking is only used when the provider email is trusted. Google and LinkedIn email verification signals are checked when available, and Facebook email is treated as trusted because Facebook Login returns account email through the email permission. The plugin does not create administrator users; new users receive the WooCommerce customer role when WooCommerce is active, otherwise the site’s configured default WordPress role is used.

Built by Tanur Graphics

Tanur Social Login is built by Tanur Graphics, a WordPress, WooCommerce, SEO, automation, and design team.

Website: https://tanur.graphics

If you need help with OAuth setup, WooCommerce customization, SEO systems, or custom WordPress development, visit Tanur Graphics for support and services.

Setup Tutorial

Google

1. Open Google Cloud Console > APIs & Services > Credentials.
2. Create an OAuth Client ID.
3. Choose Web application.
4. Add the Authorized Redirect URI shown by this plugin.
5. Configure the OAuth consent screen.
6. Copy the Client ID and Client Secret into the plugin settings.
7. Enable Google in the plugin settings and save.

Facebook

1. Open Facebook Developers and create or select an app.
2. Add the Facebook Login product.
3. In Facebook Login settings, add the Valid OAuth Redirect URI shown by this plugin.
4. Copy the App ID and App Secret into the plugin settings.
5. Make sure the app is in Live mode before public users log in.

LinkedIn

1. Open LinkedIn Developers and create or select an app.
2. Request the Sign In with LinkedIn using OpenID Connect product.
3. Add the OAuth redirect URI shown by this plugin.
4. Copy the Client ID and Client Secret into the plugin settings.
5. Enable LinkedIn in the plugin settings and save.

Security Tips

• Use HTTPS on every site that enables social login.
• Keep WordPress, WooCommerce, and all plugins updated.
• Restrict access to OAuth client secrets.
• Do not paste client secrets into screenshots or public support threads.
• Regenerate provider client secrets if they are exposed.
• Test social login after changing domains, SSL, permalinks, or caching settings.
• Use a separate OAuth app for staging and production sites.

External services

This plugin connects directly from the WordPress site to OAuth providers selected and configured by the site administrator. These services are required only when the related provider is enabled in the plugin settings.

Google

This plugin uses Google OAuth and Google userinfo endpoints to let users sign in with Google.

Data sent: when a visitor clicks “Sign in with Google”, the visitor is sent to Google for OAuth authorization. During the callback, the site sends the OAuth authorization code, the configured Client ID, Client Secret, and redirect URI to Google’s token endpoint. The site then sends the returned access token to Google’s userinfo endpoint to request the user’s Google account ID, email address, email verification status, name, first name, last name, and profile image URL when available. This data is used only to create or link a WordPress user account and log the user in.

Service provider: Google LLC.
Terms: https://policies.google.com/terms
Privacy: https://policies.google.com/privacy

Facebook / Meta

This plugin uses Facebook Login and Meta Graph API endpoints to let users sign in with Facebook.

Data sent: when a visitor clicks “Sign in with Facebook”, the visitor is sent to Facebook for OAuth authorization. During the callback, the site sends the OAuth authorization code, the configured App ID, App Secret, and redirect URI to Meta’s token endpoint. The site then sends the returned access token to the Meta Graph API /me endpoint to request the user’s Facebook ID, name, email address, first name, last name, and profile picture URL when available. This data is used only to create or link a WordPress user account and log the user in.

Service provider: Meta Platforms, Inc.
Terms: https://www.facebook.com/legal/terms
Privacy: https://www.facebook.com/privacy/policy/

LinkedIn

This plugin uses LinkedIn OAuth and LinkedIn OpenID Connect userinfo endpoints to let users sign in with LinkedIn.

Data sent: when a visitor clicks “Sign in with LinkedIn”, the visitor is sent to LinkedIn for OAuth authorization. During the callback, the site sends the OAuth authorization code, the configured Client ID, Client Secret, and redirect URI to LinkedIn’s token endpoint. The site then sends the returned access token to LinkedIn’s userinfo endpoint to request the user’s LinkedIn subject ID, email address, email verification status when available, name, first name, last name, and profile image URL when available. This data is used only to create or link a WordPress user account and log the user in.

Service provider: LinkedIn Corporation.
Terms: https://www.linkedin.com/legal/user-agreement
Privacy: https://www.linkedin.com/legal/privacy-policy