Sign in with Apple, Google One Tap, Microsoft, Amazon, LinkedIn, Discord and more, with connected accounts.
Available Updated Oct 20, 2026Version 1.0.0CS-Cart, Multi-Vendor 4.17.2 – 4.21.x No core file edits
Built for
Social Login Pro: overview1 of 19
What it does
Social Login Pro adds brand-styled sign-in buttons to the sign-in pop-up, sign-in page, checkout and registration page of CS-Cart and Multi-Vendor. Eight providers: Google, Apple, Microsoft (personal, work and school), Facebook, Amazon, LinkedIn, Discord and any OpenID Connect provider. Google One Tap signs shoppers in from any page. Customers manage connected accounts in their profile, and marketplace vendors can sign in to the vendor panel. It works next to the built-in Social login and imports its connections.
How it works
Open Customers, Social sign-in, copy the one redirect URI and follow the built-in steps for each provider; Check settings tests the keys. Choose style, shape, layout and where buttons appear. Customers click a button, approve at the provider and return signed in to the same page. A confirmed e-mail of an existing customer connects to that account; otherwise the password is asked once. Security: code flow with state, nonce and PKCE, verified signed tokens, browser binding, encrypted secrets.
Features
Sign in with Google, Apple, Microsoft, Facebook, Amazon, LinkedIn and Discord
Custom OpenID Connect provider (Okta, Auth0, Keycloak) with your own button label
Google One Tap with optional automatic sign-in for returning customers
Buttons in brand colours, outline or icons only, three shapes, stacked or grid, above or below the form
Buttons in the sign-in pop-up, sign-in page, checkout and registration page
Safe account matching by confirmed e-mail, or the account password asked once
Connected accounts in the customer profile: connect and disconnect providers
Vendor panel sign-in and connected accounts for vendors (Multi-Vendor)
Apple client secret signed for each sign-in, so it never expires
Statistics: sign-ins, new accounts, completion rate, One Tap share and failure reasons
Import of Google and Facebook connections from the built-in Social login
Full page cache friendly; CS-Cart, CS-Cart Ultimate and Multi-Vendor, 4.17.2 to 4.21
What you get
Package
kv_social_login_pro-1.0.0.zip, installed through Add-ons → Manage add-ons
Updates & support
12 months included. Download new versions from your account and install them in Add-ons → Manage add-ons or the Upgrade Center.
License
1 production installation. Staging, dev and localhost are free and unlimited. The add-on keeps working after the update period ends. How licensing works
Compatibility
We list only the builds we install and test on. “Tested” means the full test plan was run on that build; “Supported” means the build is inside the supported range and uses the same hooks.
CS-Cart version and edition compatibility
CS-Cart version
CS-Cart
CS-Cart Ultimate
Multi-Vendor
Multi-Vendor Ultimate
4.22 and later
Testing next
Testing next
Testing next
Testing next
4.21.2
Supported
Supported
Supported
Supported
4.20.x
Supported
Supported
Supported
Supported
4.19.x
Supported
Supported
Supported
Supported
4.18.x
Supported
Supported
Supported
Supported
4.17.2
Supported
Supported
Tested
Supported
Before 4.17.2
Not supported
Not supported
Not supported
Not supported
Last tested build: Multi-Vendor 4.17.2, Oct 20, 2026Tested on: Multi-Vendor 4.17.2
Requirements
PHP
CS-Cart or CS-Cart Multi-Vendor 4.17.2 – 4.21.x, PHP 7.2.5 – 8.3 with the OpenSSL and cURL extensions
Requirement
HTTPS on the storefront. Google, Apple, Microsoft and Facebook accept only HTTPS redirect addresses on a real domain. Tick Settings → Security settings → Enable secure connection for the storefront
Requirement
A developer account at each provider you want to use (free). The add-on shows the exact steps for each provider
Requirement
No cron job is needed
Core changes
None. Hooks and template overrides only
1.0.0
Oct 20, 2026
Latest
Added 10
Sign-in and registration with Google, Apple, Microsoft, Facebook, Amazon, LinkedIn, Discord and a custom OpenID Connect provider.
Google One Tap with optional automatic sign-in.
Brand-styled buttons (filled, outline, icons only; three shapes; stacked or grid; above or below the form) in the sign-in pop-up, sign-in page, checkout and registration page.
Account matching by confirmed e-mail or the account password once; Complete your sign-up step for providers without a confirmed e-mail.
Connected accounts in the customer profile (connect, disconnect, protection of the last sign-in method).
Vendor panel sign-in and connected accounts for vendors (Multi-Vendor).
Admin pages: providers with setup steps, redirect URI and settings check; statistics per provider and day.
Import of Google and Facebook keys and connections from the built-in Social login.
Security: authorization code flow with state, nonce and PKCE, verified ID tokens, browser binding, encrypted secrets, Apple client secret signed per sign-in.
Domain-bound license check and self-healing upgrades.
Tested on Multi-Vendor 4.17.2. First release.
How is this different from the built-in Social login?
The built-in add-on supports Google, Facebook, X and Telegram. Social Login Pro adds Sign in with Apple, Microsoft, Amazon, LinkedIn, Discord and any OpenID Connect provider, Google One Tap, brand-styled buttons, connected accounts in the profile, vendor panel sign-in, statistics and an import of the built-in connections. Both can run side by side.
Do I need HTTPS?
Yes, for a live store. Google, Apple, Microsoft and Facebook accept only HTTPS redirect addresses on a real domain.
Does the Apple client secret expire?
Not with this add-on. Apple limits a client secret to six months, so the add-on signs a new short-lived one from your .p8 key for every sign-in.
A customer hid their e-mail with Apple. Will they get my e-mails?
Yes, through Apple's relay address, once your store's sending domain is registered in your Apple developer account (Sign in with Apple for Email Communication).
Can someone take over an account by signing up at a provider with somebody else's e-mail?
No. An account is connected automatically only when the provider confirms the e-mail address. Microsoft does not confirm addresses of work accounts, Discord and others only with a verified address; otherwise the customer must enter the account password.
Why doesn't Google One Tap appear?
Google shows it only to visitors signed in to a Google account in that browser, not on checkout pages (unless allowed), and pauses it after a visitor closes it. Your store address must be in the Authorized JavaScript origins of the Google client.
Can customers still use their password?
Yes. Password sign-in, registration and password recovery work as before. Customers created through a provider can set a password in their profile at any time.
Does it work with the full page cache of CS-Cart 4.21?
Yes. The buttons are the same for every visitor, and the sign-in pages are never cached.
What happens if the license lapses?
Without a valid license (no key after the 14-day start period, an invalid or revoked key, a domain the license does not cover, or no successful check for 14 days), the social sign-in buttons and Google One Tap are hidden and no new social sign-ins start. A sign-in that already started is completed, and customers can still disconnect providers. Customers sign in with e-mail and password as before; connected accounts, provider settings and statistics are kept. Once the license is valid again, everything is back.
The admin panel shows a license notice.
Open Add-ons → Manage add-ons → Social Login Pro: the License card at the top says what is wrong: no key, a key for another add-on, a revoked license, or a domain that the license does not cover. Fix it on the License tab and click Check now. See License.
Does the add-on work on my staging copy?
Yes. Subdomains of your licensed domain (for example staging.example.com) and local development hosts (localhost, private IP addresses, .local, .test) are covered by the same license. Remember to add the staging redirect URI at the providers.
What happens if your license server is down?
Nothing changes for 14 days: the add-on keeps working and retries every hour. Only if no check succeeds for 14 days is it switched off until the next successful check.
Does the license check slow down my storefront or checkout?
No. The check runs only in the admin panel or from cron, at most once a day, never while customers browse, sign in or check out.
