Facebook Login for Business

• Your Meta app must be a business type app
• All permissions that your app asks for during login must be granted by your app user or your app won’t be granted any permissions.
• The email and public_profile permissions are automatically granted to all apps but at least one other supported permission must be included for each app installation.
• To serve businesses that you do not own or manage, your app must be approved for Advanced Access via Meta’s App Review
• Apps with Advanced Access are required to undergo Ongoing Review to retain access. However, apps using Facebook Login for Business have reduced requirements for certain ongoing compliance reviews because they are limited to accessing business permissions and features.

• Hourly, automated server-to-server conversion API calls
• Sending automated responses as a Facebook Page or WhatsApp business portfolio
• Continuous, automated updates to product catalog inventories
• Automated retrieval of ads insights

• Your app can only request logins from web surfaces
• Businesses onboarding to your app must have, or be willing to create, a business portfolio⁠
• Your app must be associated with a business portfolio,⁠ which you have full control. This needs to be separate from the business portfolio owned by your business client.

curl -i -X GET \
"https://graph.facebook.com/<API_VERSION>/me \
  ?fields=client_business_id
  &access_token=<BUSINESS_INTEGRATION_SYSTEM_USER_ACCESS_TOKEN>”

{
  "client_business_id": "<CLIENT_BUSINESS_ID>",
  "id": "<APP_SCOPED_ID>"
}

• Generate granular business integration system user access tokens from the existing business integration system user access tokens
• Fetch any existing business integration system user access tokens

Parameters

Sample request

curl -i -X POST "https://graph.facebook.com/v25.0/<CLIENT_BUSINESS_ID>/system_user_access_tokens
    ?appsecret_proof=<APPSECRET_PROOF_HASH>
    &access_token=<ACCESS_TOKEN>
    &system_user_id=<SYSTEM_USER_ID>
    &fetch_only=true"

{
  "access_token": "<NEW_ACCESS_TOKEN>"
}

User access token login flow	Business integration system user access token login flow

1. In Meta’s App Dashboard, create a Business type app.
2. Add the Facebook Login for Business product.
3. In the left side menu select Configurations.
4. You can either + Create configuration to create a configuration or Create from template to select one of Meta’s preset configurations.
   You can create multiple configurations and present them to different sets of users.
5. Name your configuration
6. Choose the type of access token you want to request from your business clients, a User access token or System-user access token and token expiration.
   If you select User access token then your app users will log in using their personal Facebook account. If you select System-user access token your app users will be required to log in using a business portfolio. This is only required if this configuration needs continuous access to business assets, such as Facebook Pages, ad accounts or Instagram accounts.
7. Select all the assets your app needs access to.
8. Select the permissions your app needs and click Create.

Business integration system user access token configurations

FB.login(
  function(response) [
    console.log(response);
  ],
  [
    config_id: '<CONFIG_ID>',
    response_type: 'code',
    override_default_response_type: true
  ]
);

GET https://graph.facebook.com/v25.0/oauth/access_token?
  client_id=<APP_ID>
  &client_secret=<APP_SECRET>
  &code=<CODE>

User access token configurations

FB.login(
  function(response) {
    console.log(response);
  },
  {
    config_id: '<CONFIG_ID>' // configuration ID goes here
  }
);

<fb:login-button config_id="<CONFIG_ID>" onlogin="checkLoginState();">
</fb:login-button>

config_id=<CONFIG_ID>

1. Select your app in the App Dashboard
2. Go to or add the Facebook Login product
3. Click either Settings or Quickstart in the left side menu
4. Click the “Get started with Facebook Login for Business” button at the top of the page.

• Config ID is invalid
• Business System User Access Token is not currently supported on Mobile devices
• Business System User Access Token is set up with incorrect response_type

• If your app type is currently None, switching to Facebook Login for Business will change your app’s type to Business and will only retain access to the permissions, features and products listed above.
• If you request permissions or features from business clients that Facebook Login for Business doesn’t support, those permissions and features will be revoked immediately once you switch your app to Facebook Login for Business.
• If you only request email and/or public_profile from your business clients, switching the app to Facebook Login for Business will lead to the invalidation of all previously installed tokens for these clients.
• If your app has both Facebook Login for Business and Meta Business Extension, the Meta Business Extension experience will be limited to permissions supported by Facebook Login for Business.
• Business Asset User Profile Access may affect how user profile data is accessed and managed through our APIs.
• Note that if the login dialog for Facebook Login for Business is invoked via configuration id, and if you decide to rollback to Facebook Login, the login dialog might fail to load as Facebook Login does not support the config_id parameter and you need to replace the config_id parameter with the scope parameter instead.