Skip to main content

X

Set up X as a social login provider in SecureAuth Connect so users can sign in with their X account.

Register X as a provider

  1. In your workspace, go to Authentication > Providers.

  2. Click Create Connection.

  3. Filter by Social Providers and select X. Create Connection page showing available social providers

  4. Choose a registration mode:

    ModeDescription
    EmbeddedUses a client application registered by SecureAuth. No developer portal registration required.
    Bring your OwnUses a client application registered by your organization. Requires registering an application in the X Developer Platform to obtain API Key and API Secret credentials.

    X Configuration tab showing Embedded mode and Display order

  5. Click Save.

Configuration

SettingDescription
NameDisplay name for this provider. Default: X.
Display orderControls the position of this provider on the sign-in page. Default: 0.

Use Try Sign-in to test the X sign-in flow. Use Delete Identity to remove this provider.

X sign-in page shown when testing with Try Sign-in

Attributes

X returns the following attributes after authentication:

Connector nameFriendly nameData typeScope
idUser IDStringUser Info
nameNameStringUser Info
usernameUsernameStringUser Info
confirmed_emailConfirmed EmailStringUser Info
first_nameFirst nameStringUser Info
last_nameLast nameStringUser Info

X uses username (the user's X handle) and confirmed_email rather than a standard email attribute. The confirmed_email attribute contains the email address verified by X.

To add custom attributes, click + Add attribute.

Mappings

Default attribute mappings from X to the SecureAuth authentication context:

SourceX source nameSecureAuth target name
User InfoNameName
User InfoFirst nameGiven name
User InfoLast nameFamily name
User InfoConfirmed EmailEmail

To customize, click + Add mapping or + Add static mapping.

Provisioning

Provisioning controls what happens when a user authenticates through X.

Disabled

Users are not persisted in the user store. Authentication succeeds but no user record is created.

Just-in-Time Provisioning

Users are persisted in the user store on first login.

Identifier Correlation
Maps the incoming X identity to an existing user. Default: X Email ↔ Users Email.

Attribute Provisioning
Maps X attributes to user profile fields. Defaults:

  • EmailEmail
  • Given nameFirst name
  • Family nameLast name

Provisioning tab with Just-in-Time Provisioning selected, showing Identifier Correlation and Attribute Provisioning

Pre provisioning mode

Users must already exist in the user store before they can authenticate. New users are not auto-created at login; they must be added via an offline process.

Authentication flow control
Select what happens when no matching user is found:

  • Deny – Terminate the authentication flow.
  • Allow – Proceed with the authentication flow.

Identifier Correlation
Maps the incoming X identity to an existing user. Default: X Email ↔ Users Email.

Attribute Provisioning
Maps X attributes to user profile fields. Defaults:

  • EmailEmail
  • Given nameFirst name
  • Family nameLast name

Provisioning tab with Pre provisioning mode selected, showing Authentication flow control and Attribute Provisioning

Extensions

ExtensionDescription
Post Authentication scriptA server-side script that runs after X authentication completes. Click Manage Script to configure.
Post Authentication applicationA custom application that receives a callback after X authentication completes. Click Manage Custom App to configure.

See also