Set up Social Login (Open Authentication)

Set up open authentication so constituents can log in to your site with their social account credentials, instead of creating a new registration on your site.

Open authentication is an open standard for token-based authentication on the Internet. Authentication verifies who you are.

With open authentication, a user's account information can be used by third-party services, such as Facebook, without exposing the user's password. Login information for constituents is accessed and validated using APIs owned by the service connection company, Akamai. The product is called Akamai Identity Cloud.

Note: Luminate Online does not store user's passwords for their linked accounts. While administrators can view linked profiles from within a constituent record, viewing permissions are set and managed by the social site.

After you configure open authentication and enable social login, the Social Site login component is automatically added to the standard Login page as string of social site icons similar to the following image:

Not only does this provide a convenient login mechanism, but when new constituent profiles are created from social logins, sharable data from their social accounts is stored as part of their constituent profile. You can use this profile information to better customize communications toward your audience.

Note: Users are prompted as to what information they are sharing, which they must specifically opt into. Administrators also have the ability to decide what personal information to pull during the registration process, as described in this procedure.

Social Login is using existing username and password credentials from a social account to log into a secured site.

Akamai Identity Cloud (formerly Janrain) is a social login account tool that uses plug-ins for your site that allow constituents to move directly from your organization's site to your organization’s social media networks. To use Akamai Identity Cloud for social sharing and open authentication on your site, you must have a Akamai account, which is created as part of this procedure.

After a user registers for your website using social account credentials, the social account is remembered so users can log in again the same way. When a user logs out of your site, the social account connection remains active until the user signs out of the social account.

Note: Contact Blackaud Support for help resolving Akamai Identity Cloud issues with Luminate Online or Luminate CMS.

Enable open authentication:

  1. Click Constituent360 > Social Media.

  2. Click the Open Authentication tab.

  3. Click View/Change Janrain Account Parameters.

  4. Choose one of the following options and complete the steps:

    Note: Before you begin, disable blocker extensions in your browser, such as Google Chrome's uBlock or AdBlock. When blocking tools are enabled, the Janrain/Akamai account creation does not complete, and Engage apps are not created.

      1. Enter a valid email address in the Janrain Admin Email Address field.

      2. Enter a name for your application in the Janrain Engage App Name field.

        Tip: Use only letters, numbers, and hyphens. Do not use spaces or other special characters in the name. For example, use MyOrgsApp, or My-Orgs-App. If you get a message that you do not have a unique app name, continue entering different names to find an app name that is unique.

      3. Click Finish. Akamai (formerly Janrain) sends an email to the account specified.

      4. For the email account specified, open the inbox and locate an email from Akamai (formerly Janrain).

        Tip: The email subject might include, "Activation for (domain).rpxnow.com." If you don't see the email, check the junk or spam folder. If you cannot locate the email, contact Blackbaud Support.

      5. In the email, click the link to open the Akamai (formerly Janrain) website.

      6. Click Create Account.

      7. Create an account by entering the same email address and choose a password.

      8. Click Continue. Account creation is complete. Akamai (formerly Janrain) sends an email to the account specified.

      9. Open the email from Akamai.

        Tip: The email subject might include "Janrain Dashboard email verification". The sender might be "noreply".

      10. Click the link to verify your email address.

      11. (For multiple-sites only) Repeat these steps to create a Janrain Engage App for every Luminate Online instance used by your organization.

      12. Continue to the next step to Enable Open Authentication.

      --OR--

      1. Enter the Janrain API Key for your app.

        Tip: To locate this key, open your Social Login Dashboard, click the Manage Engage App icon for your app, and under Settings, click App Info. The key is listed under API Key (Secret).

      2. Enter the subdomain name for your Engage app.

        Tip: The subdomain portion of your app is the part between "https://" and ".rpxnow.com". So, if your app name is, "https://My-Orgs-Name.rpxnow.com", enter My-Orgs-Name in this field.

      3. Click Finish.

      4. Continue to the next step to Enable Open Authentication.

  5. In Luminate Online, click Enable Open Authentication.

  6. Click Finish.

  7. Click Enable Janrain.

  8. In the message box that appears, click OK.

  9. Choose the data you want to pull from social accounts and save in the constituent's profile by selecting boxes in the Constituent Profile Data to Share Between Accounts section.

    Note: Not all social networking sites store all of the fields displayed.

  10. Add social account providers. When configured, they display in the Authentication Service Providers section.

    Use Akamai's Social Login Provider Configuration Guides for detailed steps to configure providers.

    1. Log into your Social Login Dashboard.

      Tip: If you do not see your Engage app listed, open the email from Akamai with the subject, "Engage Basic Sign-up Confirmation for AppName", and use the dashboard link from the email.

    2. Click the Manage Engage App icon for your app.

    3. In the Providers section, click the Manage Providers icon.

    4. In the list on the right, click the name of a provider that you want to add.

      Note: Facebook requires a Meta for Developers account.

    5. Click Configure.

    6. Follow all steps in the popup setup guide or as outlined in the Akamai's Social Login Provider Configuration Guides.

      Note: Enabled providers display on the Authentication Settings page in Luminate Online within a time frame of an hour to end of the day, depending on Akamai's update.

    7. Save and publish your configurations:

      1. Return to Akamai's Social Login Dashboard.

      2. In the Widgets and SDKs section, click Sign-Ins.

      3. Click Providers.

      4. Scroll to the bottom, and click select the Save and Publish radio button, and click Publish.

      Tip: Green cog wheel icons indicate that the provider is configured and ready. Grey icons are not yet configured.

  11. Verify that the allowlisted domains in the Social Login Dashboard include all domains that will host social login or social sharing links:

    1. Return to Akamai's Social Login Dashboard.

    2. Click the Manage Engage App icon for your app.

    3. In Settings, click the Domain Whitelist down-arrow.

    4. In the Domain Whitelist section, verify that all secure and non secure domains that might host your social login or share links display. If not, add them.

      List all possible domains that may be used by your organization to host social login or sharing, including secure (HTTPS) and non-secure (HTTP) domains.

      If your administrator login site is "https://secure3.convio.net/shortname/admin/AdminLogin", then your organization's domain is "secure3.convio.net".

      Enter two entries per domain. In this example, you would enter these two domains:

      secure3.convio.net
      *.convio.net

      The second domain with the asterisk (*) includes subdomains and subfolders.

      If you have a customized, Luminate-hosted domain, enter "shortname.convio.net," where shortname is the custom name for your site. For example, if you have a customized domain, such as "support.diabetes.org," include that domain, along with a second entry for "*.diabetes.org."

      • Donation forms are secure. To offer social share on a donation form, you must allowlist the secure domain that hosts the forms.

      • Participant Centers 2 and 3 are secure. You must allowlist the secure Participant Center domain to display social icons in the right-hand column.

      • Luminate CMS-hosted pages must also be included.

    5. Click Save.

  12. In Luminate Online, click Save.

Tip: The related action, Record Social Network Application Keys, is not necessary for setup of Akamai Identity Cloud. You can find all of these keys in the Social Login Dashboard after configuring Akamai.

Next, Add and customize social login icons and Set Up Social Sharing