XenForo already supports connected-account login. The frustrating part is setting everything up correctly with Google, Apple, Microsoft, GitHub and Facebook.
Eggy Connected Account Assistant turns that process into a guided Admin CP setup instead of making you work through OAuth documentation, developer-console terminology and callback URLs yourself.
Choose a provider and the assistant walks you through the setup step by step, explains what each field actually means, generates the exact values your XenForo installation needs, and tells you exactly what to copy into the provider's developer console.
When the provider gives you credentials back, enter them into the assistant and it configures XenForo's native Connected Account provider rather than replacing XenForo's authentication system.
The add-on also includes a built-in diagnostics system covering the add-on itself, XenForo's native provider classes, callback URLs, configuration state, Apple key requirements, Microsoft secret expiry, provider infrastructure and setup-documentation changes.
No OAuth knowledge required. No separate authentication system. No guessing which URL belongs in which box.
It is designed for XenForo administrators who simply want social login working without turning provider setup into a project of its own.
Features
SUPPORTED PROVIDERS
• Apple
• Microsoft
• GitHub
GUIDED PROVIDER SETUP
• Step-by-step Admin CP setup for every supported provider
• Plain-English explanations for unfamiliar OAuth terminology
• Exact values generated from your XenForo Board URL
• One-click copy values for provider developer consoles
• Exact connected_account.php callback URL generation
• HTTPS and Board URL pre-flight checks
• Existing XenForo provider configurations detected
• Existing provider credentials are not unnecessarily overwritten
• Current Google Auth Platform setup guidance
• Web Application client walkthrough
• Authorized JavaScript Origin generation
• Authorized Redirect URI generation
• Client ID and Client Secret setup
• Domain guidance
• Clear warnings about which Google values must be copied and retained
APPLE
• Apple Developer prerequisite guidance
• Sign in with Apple setup walkthrough
• Primary App ID guidance
• Services ID setup
• Domain and Return URL generation
• Team ID setup
• Services ID setup
• Key ID setup
• .p8 private-key upload support
• Private-key pre-flight validation
• Native XenForo Apple key handling
• Private Email Relay guidance
• SPF/DKIM diagnostics for relay email configuration
MICROSOFT
• Current Microsoft Entra application registration guidance
• Personal Microsoft account setup guidance
• Web redirect URI generation
• Application / Client ID setup
• Client Secret Value guidance
• Clear Secret Value vs Secret ID warning
• Secret expiry tracking
• Automated expiry warnings
• 60 / 30 / 14 / 7 / 1-day expiry thresholds
• Expired-secret warning
• Microsoft infrastructure health diagnostics
GITHUB
• OAuth App setup walkthrough
• Clear OAuth App vs GitHub App explanation
• Homepage URL generation
• Authorization callback URL generation
• Client ID and Client Secret setup
• Facebook / Meta application setup guidance
• Facebook Login configuration guidance
• Website URL generation
• Valid OAuth Redirect URI generation
• Privacy Policy and Terms URL guidance
• App ID and App Secret setup
• Production / normal-user availability reminders
BUILT-IN DIAGNOSTICS
• XenForo version check
• Add-on active-state check
• HTTPS Board URL check
• connected_account.php callback validation
• Physical callback-file check
• OpenSSL check
• JSON extension check
• Assistant database-table checks
• XenForo file-health verification
• Required PHP class and method validation
• ACP route validation
• ACP navigation-tree validation
• ACP permission validation
• Cron registration checks
For every provider:
• Native XenForo provider-record check
• Expected XenForo provider-class validation
• Native handler loadability
• Redirect URI validation
• Native configuration-state check
• Native XenForo Test Provider capability check
• Provider-specific diagnostics
ONGOING HEALTH & MAINTENANCE
• Scheduled provider health checks
• Weekly provider documentation monitoring
• Detects when provider documentation or setup pages change
• Documentation changes create review advisories
• Working providers are never automatically disabled because documentation changed
• Microsoft credential-expiry monitoring
• Provider infrastructure reachability checks
• Diagnostics reports contain no OAuth secrets or tokens
SECURITY
• Uses XenForo's native Connected Account system
• Does not replace XenForo OAuth authentication
• Does not modify existing connected-user associations
• Provider credentials remain inside the XenForo installation
• Eggy does not receive customer OAuth credentials
• Secrets are not stored in the assistant's diagnostics/log tables
• Secrets are not printed in diagnostic reports
• Apple private-key storage remains handled by XenForo
• No remote executable code is downloaded by the guide-monitoring system
COMPATIBILITY
• XenForo 2.3.12+
• PHP 8.0+
• HTTPS strongly recommended and required for normal production use with several providers
Requirements
• XenForo 2.3.12 or newer
• PHP 8.0 or newer
• HTTPS recommended and required by several providers for production login
• Administrator access to configure XenForo Connected Accounts
• A developer/application account with each provider you wish to configure
Provider-specific requirements may apply, including Apple Developer Program membership for Sign in with Apple.
Installation
1. Download the Eggy Connected Account Assistant ZIP.
2. Open XenForo Admin CP → Add-ons.
3. Choose Install/upgrade from archive.
4. Upload the complete Eggy-Connected-Account-Assistant-1.0.2-XenForo.zip file.
5. Allow XenForo to complete the installation.
6. Open Admin CP → Eggy Connected Accounts → Diagnostics.
7. Confirm the local diagnostics pass.
8. Choose Google, Apple, Microsoft, GitHub or Facebook and follow the guided setup.
The add-on uses XenForo's native Connected Account providers. It does not replace XenForo's authentication system.
