Setting up Bitbucket (OAuth2) social login

📘

Tenant-Level Social Login

This guide outlines the process for implementing social login at the Application Level. The steps are consistent when configuring social login at the Tenant Level, with the only difference occurring in the Wristband dashboard. In this case, you would select a specific tenant for configuration and override purposes.

Setting Up a Bitbucket OAuth2 Integration

This step-by-step guide details how to set up a Bitbucket social login integration in Wristband.

Step 1: Locate Your External IDP Callback URL

• In the Wristband dashboard, enter Application View for the application you wish to establish a Bitbucket integration.
• Navigate to the Identity Providers > Social menu in the side navigation.
• After landing on the Social Identity Providers page, select the Bitbucket provider icon at the top.

Copy the "Redirect URL" from the form.

Step 2: Sign Up/Login to Your Bitbucket Account

Before completing the configuration of the Bitbucket Social Login Identity Provider in the Wristband dashboard, log in to your Bitbucket account here (make sure you have a Bitbucket account registered).

Step 3: Register an OAuth Consumer

Navigate to the All Workspaces page from the profile dropdown menu in the navbar.

On the All Workspaces page, you will see a list of all Workspaces you have access to. Click the "Manage" link for the Workspace you wish to set up a social login integration.

On the Workspace Settings page, select the "OAuth consumers" menu from the side navigation. Click the "Add consumer" button to start registering a new OAuth Consumer.

Fill out the form with the following mandatory fields:

• Name: Any appropriate value.
• Callback URL: Paste the External IDP Callback URL from step 1.
• Permissions: Enable Email and Read Account permissions. All other permissions are optional.

Click "Save" to finish.

Step 4: Copy OAuth Credentials

After the consumer is registered, you will return to the OAuth Consumers page. Expand the newly created consumer to see the "Key" and "Secret" values. Copy these values for use in the next steps.

You have now configured everything necessary on Bitbucket's side for social login integration.

Step 5: Configure the Bitbucket IDP in Wristband

Return to the Wristband dashboard to the Social Identity Provider Page from step 1. Fill out the form with the following values:

• Client ID: The Key value from step 4.
• Client Secret: The Secret value from step 4.

By default, the following scopes will always be requested during authorization with Bitbucket (additional scopes are optional):

• account
• email

Click "Save" to finish. The Bitbucket External IDP will be in an ENABLED status.

At this point, the application has successfully completed a Bitbucket social login integration. The next time users in this application reach the Tenant-level Login Page, they should see a Bitbucket login button (unless Tenant Overrides are enabled for a particular tenant).