Session I delivered at Oredev 2013 regarding implementing social login and registration in your applications.

1. Building
Secure and Social
Applications
Michele Leroux Bustamante
michelebusta@solliance.net

2. Why Social Login?

3. Fewer passwords
to remember

4. Single Sign-On (SSO)

6. Gather information

8. Read your thoughts
Perform actions based on your thoughts

9. Share

11. Access to millions
of new users

12. As of October 29, 2013
•
•
•
•
•
Facebook 1.2 B
Google+ 540 M
TW 500 M
LinkedIn 300 M
Yahoo 300 M
http://www.nydailynews.com/news/national/google-540mmonthly-users-lags-behind-facebook-article-1.1500403

15. Session Agenda
•
•
•
•
•
Social registration
Social Login and SSO
Gather profile information
Linking accounts
Social sharing

16. DEMO

17. Twitter Setup
No app required
Redirect and login
User asked to authorize during login
Authorization code returned
Application uses code to request an
access token
• Application uses access token to
interact with provider API
•
•
•
•
•

20. Facebook Setup
•
•
•
•
•
•
Create an app at the provider
Get the application “keys”
Redirect and login
Users asked to authorize during login
Authorization code returned
Application uses code to request info

23. Protocol Flow
• What really happened?
• Redirect to provider
– User authenticates
– Authorization code returned
• Call to provider with code
– Request additional user information
– Must be authorized information

24. DEMO

25. Social Sharing
• Share directly from JavaScript
– Generate sample buttons at provider site
– Customize as desired
• Share through API
– Requires access token to operate on behalf
of the user

26. DEMO

30. Gathering Information
• Use the access token to request
information from the provider
• Unique identifier per user
• Additional details can vary

31. DEMO

33. Development Platforms

34. Connecting Accounts
• Goal to have a single profile
• Login with one or more provider, same
user profile
• Share with one or more
provider, irrespective of login

35. DEMO

36. Design Decisions
•
•
•
•
Which providers will you support?
What profile information do you need?
What sharing options / methods?
How do you want to handle providers?

37. What if it could
be easier?

38. One Example

39. What if it could
be easier?

46. References
• Conference resources to be referenced here:
– http://michelebusta.com
• See my snapboards:
– Currently at the alpha site:
http://snapboardalpha.cloudapp.net/michelebusta
– Will move these to snapboard.com/michelebusta
when we go live on the main site (SOON watch my
blog for announcement)
• Contact me:
– michelebusta@solliance.net
– @michelebusta

47. Michele Leroux Bustamante
Managing Partner
Solliance (solliance.net)
CEO and Cofounder
Snapboard (snapboard.com)
Microsoft Regional Director
Microsoft MVP
Author, Speaker
Pluralsight courses on the way!
Blog: michelebusta.com
michelebusta@solliance.net
@michelebusta