Social login providers
To configure the available providers for your portal, use the node in the Portal configuration.
See Login node.
- Logging out of Rhythm for Civics does not log users out of their social provider accounts. Users who authenticate with providers such as Google or Facebook remain signed in to those accounts within the same browser session. This may create unintended access risks on shared or unattended devices.
- Signing in through Apple is not fully supported because Apple only sends user information during the initial token exchange. If a user quits or times out and that data isn’t captured, it cannot be retrieved.
Agencies that enable Apple login will need to guide users through the workaround of unauthorizing the app in their Apple account and attempting to sign in again to trigger a fresh data exchange.
Apple’s token expiration rules also mean that users might need to reauthenticate, or in some cases unauthorize the app again, if their token expires mid-process.
Apple requires the client secret used for authentication to be regenerated every six months. If it is not refreshed, Apple-based logins will stop working. Rhythm for Civics does not automate the renewal, so you must manage the refresh manually.
Full support for these scenarios will be delivered in a future release.