How to disable sign up via social login?

[lijunle]

I can see the admin is able to block a SSO user. Could we have all SSO login blocked by default, until admin approve/unblock it, or link it to an existing DB user?

Block and Unblock Users

---

Edit: I archived by defining a customer field user_metadata.allowed. New user will not have this metadata field denied, so they are denied. The admin needs to manually set allow:true to accept this user.

Configure Login flow with following code:

exports.onExecutePostLogin = async (event, api) => {
  if (!event.user.user_metadata.allowed) {
    api.access.deny("User metadata allowed is not set");
  }
};

Set allowed:true on an existing user.

---

I saw a more comprehensive script here:

Disable Social Signup..except for Linking existing account

Hello, I had the same issue and wanted in my app the same control. An admin should first create a user in the database password connection. Then only users can login via social login. The rule will prvent login in with a social account if their primary db account is not set up: function disableSocialSignups(user, context, callback) { // initialize app_metadata user.app_metadata = user.app_metadata || {}; // Detect if this is the primary login/password connection const isPrimaryDbConnect…