Facebook sign-in needs an app in the Meta developer console with the Facebook Login product added. Meta’s console changes layout often; the names below are current as of 2026, and the steps are the same even when the buttons move.
1. Create the app
- Open developers.facebook.com and sign in.
- My Apps → Create App. Use case: Other. App type: Consumer. Give it a name and a contact email.
2. Basic settings
Under App settings → Basic:
- App domains: your domain without the protocol, e.g.
example.com. - Privacy policy URL: required before the app can go live. Your site’s privacy page.
- User data deletion: a URL describing how users can ask for their data to be removed. Your privacy page is acceptable if it explains this.
- App icon (1024 × 1024) is optional but shows on the consent dialog.
Save changes.
3. Add Facebook Login
- In the left sidebar, Add product → Facebook Login → Set up.
- Under Facebook Login → Settings:
-
Valid OAuth redirect URIs: your login page,
https://example.com/wp-login.php -
Client OAuth login: yes.
-
Web OAuth login: yes.
-
- Save.
4. Permissions
Under App review → Permissions and features, request Advanced access for email and
public_profile. These two are granted automatically for consumer apps once your app has a
privacy policy; no manual review is needed.
5. Go live
Switch the app from Development to Live using the toggle at the top of the console. In development mode only the app’s own developers and testers can sign in.
6. Connect it to FluentAuth
Under App settings → Basic, copy the App ID and App secret (click Show). Paste
them on the Facebook card under FluentAuth → Settings → Social Login, or add them to
wp-config.php:
define('FLUENT_AUTH_FACEBOOK_CLIENT_ID', '…');
define('FLUENT_AUTH_FACEBOOK_CLIENT_SECRET', '…');
Turn on Enable login with Facebook and save.
Common errors
| Facebook says | Cause |
|---|---|
Can't load URL: The domain of this URL isn't included in the app's domains | App domains missing or wrong under Basic settings |
URL blocked: This redirect failed because the redirect URI is not white-listed | Valid OAuth redirect URIs does not include the login page, or uses a different scheme or host |
App not active | Still in development mode and the user is not a listed tester |
| A user signs in but no email is set | The Facebook account has no confirmed email, or email permission was declined. FluentAuth cannot create an account without one |