> For the complete documentation index, see [llms.txt](https://support.storefront.co.za/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://support.storefront.co.za/features/stores/store-settings/customer-accounts-and-sign-up/login-methods.md).

# Login methods

Login methods let your customers sign in using an account they already have, instead of creating and remembering another password. Fewer passwords generally means fewer abandoned registrations and fewer password reset requests.

Three providers are supported: Microsoft Entra, Google and Apple. You can enable any combination of them, and customers who prefer a password can still register normally.

### Before You Start

Each provider is set up on the provider's own side first, and you then paste the credentials it gives you into your store. You need an account with the provider you want to offer.

### Microsoft Entra

Allows customers to sign in using Microsoft Entra.

* **Tenant Id** - the Entra tenant customers sign in against.
* **Client Id** and **Client Secret** - the credentials for the application you register in Entra.
* **Scope** - the information your store requests about the customer.

Entra Verified ID can also be used, which requires the authority, credential name and decentralised identifier supplied by your Entra setup.

### Google

Allows customers to sign in using their Google account.

In the Google Cloud Console, create an OAuth 2.0 Client ID of type Web application, then paste its details here.

* **Client Id** and **Client Secret** - from the OAuth client you created.
* **Scope** - leave blank to use the default, which requests the customer's email and basic profile.
* **Authorised redirect URI** - your store displays the exact address to use. Add it to the Authorised redirect URIs list in your Google OAuth client.

{% hint style="warning" %}
The authorised redirect URI must match exactly. A mismatch causes a redirect\_uri\_mismatch error when a customer tries to sign in, and is the most common reason Google sign-in fails.
{% endhint %}

### Apple

Allows customers to sign in using Sign in with Apple.

{% hint style="info" %}
Apple requires a paid Apple Developer Program account to create the Services ID and key needed for this.
{% endhint %}

### How to Enable a Login Method

1. Create the application or client on the provider's side and note the credentials it gives you
2. Click on the store you want to add the login method to
3. Click on Manage Store Settings underneath Settings
4. Open Customer Accounts & Sign-Up
5. Open the Login methods section
6. Switch on the provider you want to offer
7. Paste in the credentials from the provider
8. For Google, copy the authorised redirect URI shown and add it to your Google OAuth client
9. Save your changes
10. Sign out of your storefront and test the new option from a customer's point of view before announcing it

### Need Help?

If a login method is not appearing on your storefront, or a customer reports an error when using one, please contact our support team.