How to use Social Login

After installing the app, open Settings → Apps → Social Login → Settings. Each provider has its own tab. The pattern is the same for every provider: turn it on, paste the credentials from the provider, copy the redirect URL that NIZU shows you into the provider's console, then save and authorize.

General pattern

1. Open the provider tab and switch Enable … Login on.
2. Copy the redirect URL that appears in the tab.
3. In the provider's developer console, register an application and paste that redirect URL as an allowed / authorized redirect URI.
4. Copy the Client ID and Client secret the provider gives you back into the NIZU tab.
5. Click Save & authorize. When the status badge turns Authorized, the button appears on your sign-in page.

Apple is the one provider without a pasted client secret — instead you provide a signing key (see the Apple section below); everything else follows the same pattern.

Microsoft (Microsoft 365 and personal accounts)

Microsoft login lets both company Microsoft 365 (work / school) accounts and personal accounts such as outlook.com, hotmail.com and live.com sign in.

1. In NIZU, open the Microsoft tab and switch Enable Microsoft Login on. Copy the redirect URL shown at the bottom of the tab.
2. Go to the Microsoft Entra admin center (entra.microsoft.com) and open App registrations → New registration.
3. Give the app a name. Under Supported account types, choose “Accounts in any organizational directory and personal Microsoft accounts” — this is what allows both company and personal accounts.
4. Under Redirect URI, select platform Web and paste the redirect URL you copied from NIZU. Register the app.
5. On the app's Overview page, copy the Application (client) ID.
6. Open Certificates & secrets → New client secret, create a secret, and copy its Value immediately (it is shown only once).
7. Paste the Application (client) ID and the secret value back into the NIZU Microsoft tab and click Save & authorize.

Apple (Sign in with Apple)

Apple login lets anyone with an Apple ID sign in, including people who use Apple's Hide My Email private relay addresses. You need a paid Apple Developer Program membership. Unlike the other providers there is no pasted client secret — NIZU signs a short-lived secret itself using a private key you download from Apple, so four values are required: a Services ID, your Team ID, a Key ID and the .p8 private key.

1. In NIZU, open the Apple tab and switch Enable Apple Login on. Copy the redirect URL shown at the bottom of the tab. Your workspace must be served over HTTPS — Apple does not accept plain-HTTP return URLs.
2. Go to the Apple Developer portal (developer.apple.com) and open Certificates, Identifiers & Profiles → Identifiers. If you do not have one yet, create an App ID and tick the Sign in with Apple capability.
3. Still under Identifiers, create a Services ID (for example com.yourcompany.workspace). Enable Sign in with Apple on it, click Configure, pick your App ID as the primary, and register your workspace domain plus the redirect URL you copied from NIZU as a Return URL.
4. Open Keys → create a new key, tick Sign in with Apple, and register it. Note the Key ID and download the .p8 file — Apple lets you download it only once, so store it safely.
5. Find your Team ID (10 characters) on the Membership page of the developer portal.
6. Back in the NIZU Apple tab, paste the Services ID (as the client ID), the Team ID, the Key ID, and the full contents of the .p8 file into the private key field, then click Save & authorize and complete the Apple sign-in prompt.

Good to know: Apple shares the user's name only the very first time they approve your workspace, and users may choose to hide their real email address — in that case Apple provides a working private relay address that NIZU uses like any other email. If a user wants to re-share their details, they can revoke access to your app in their Apple ID settings and sign in again.

Google

1. Enable the Google tab and copy the redirect URL.
2. In the Google API Console, create OAuth client credentials of type Web application and add that redirect URL under Authorized redirect URIs.
3. Copy the Client ID and Client secret into the Google tab and click Save & authorize.

Facebook

1. Enable the Facebook tab and copy the redirect URL. Facebook login requires an HTTPS site.
2. In the Facebook developer console create an app, add Facebook Login, and add the redirect URL under Valid OAuth Redirect URIs.
3. Copy the App ID and App secret into the Facebook tab and save.

Telegram and WhatsApp

Open the Telegram or WhatsApp tab and follow the on-screen help in that tab, which lists the exact credentials to paste and the URL to register. These providers verify the user's phone number and match it to an existing NIZU account.

Testing your setup

Sign out, open the sign-in page, and confirm the provider button is shown. Click it and complete the provider sign-in. Existing users are logged straight in; if client signup is allowed, a brand-new user is created as a client contact and receives a welcome email.