Social providers

You can sign in to Plugipay with Google or Apple in addition to email + password. This page covers how each works, when they're available, and how to mix them with your account.

How it works

When you click Continue with Google (or Apple) on the sign-in page, Plugipay redirects you to Huudis — our identity provider. Huudis then redirects you to Google or Apple to authenticate. After you sign in there, you bounce back through Huudis to Plugipay, signed in.

You never see Plugipay's email/password screen on this path.

The Huudis identity is the same regardless of which method you used. Sign in with Google once, then add a password later, and you can use either to sign in afterward.

Availability

The Google and Apple buttons only appear when the corresponding provider is configured on the Huudis instance. If they're not visible on your sign-in screen, that provider isn't wired and email/password is your only option.

This is controlled at the Huudis level, not per-product. If Google is configured for Huudis, it's available for every Forjio product (Plugipay, Storlaunch, etc.) simultaneously. Same for Apple.

You can check which providers are live at any time:

curl https://huudis.com/api/v1/auth/providers

Response:

{
  "data": {
    "google": true,
    "apple": false,
    "facebook": false
  }
}

Each product's sign-in page calls this endpoint at load time and hides buttons for false providers. If a button persists for a disabled provider (typically a stale browser tab), refreshing the page fixes it.

Sign up with a social provider

If you don't have a Plugipay account yet:

Click Continue with Google or Continue with Apple on the sign-up page.
Sign in to Google/Apple if you aren't already.
Consent to sharing your email and name with Plugipay.
You're returned to Plugipay, signed in, with your first workspace created.

No password is set. Your account is identified by your Google or Apple account — lose access to that, and you lose access to Plugipay (unless you also add a password; see below).

The email Plugipay sees comes from the social provider:

Google — your primary Google email.
Apple — either your real Apple ID email or a private relay email (xxx@privaterelay.appleid.com) if you chose "Hide my email."

Apple's private relay is fine for sign-in but inconvenient for receipt emails — we can't message you directly. If you'd like to receive emails normally, choose "Share my email" on Apple's consent screen, or add a different email in Settings → Notifications.

Add a social provider to an existing account

If you signed up with email + password and want to add Google or Apple later:

Go to Settings → Security → Linked accounts.
Click Link Google or Link Apple.
Sign in to the social provider.
We attach it to your Huudis identity.

After linking, both methods work. The email on the social provider must match your Plugipay email — if it doesn't, the link fails and we'll prompt you to use the email change flow instead.

Add a password to a social-only account

If you signed up with Google or Apple and want to add a password (for fallback access):

Go to Settings → Security → Set password.
Plugipay sends a confirmation email.
Click the link.
Set a password.

After this, you can sign in with email + password or the social provider.

Remove a linked provider

In Settings → Security → Linked accounts, click Unlink next to the provider you want to remove.

We block unlinking the only sign-in method — if Google is your only way in, unlinking it would lock you out. Add a password (or a different social provider) first.

What we see from each provider

We only ask for what we need:

Provider	Data we receive
Google	Email, name, Google account ID, profile picture URL
Apple	Email (or private relay), name (first sign-in only), Apple account ID

We don't store the profile picture — just use it for the dashboard avatar at display time. We don't see your contacts, calendars, files, or anything else. We don't see your password at any provider; the auth happens on their domain.

You can revoke our access at any time from your Google or Apple account settings — that detaches the provider, but your Plugipay account stays (you just can't sign in with that provider until you re-link).

Apple Sign In quirks

A few Apple-specific things worth knowing:

The name appears only on first sign-in. If you sign up with Apple, we see your name once. After that, Apple stops sending it. We cache it — you can update it in Settings → Profile if you want.
Private relay emails forward, but only from Apple-known senders. If we configure a new sender domain that Apple doesn't know yet, the email won't reach you. We keep our sender domain pinned and verified, but if you're not receiving Plugipay emails on a private relay, switching to a real email in Settings will fix it.
Apple Sign In requires App Tracking Transparency on iOS. Not relevant for the web sign-in flow, but if you ever use a native Plugipay app, you'll see the iOS permission prompt.

Google Sign In quirks

Workspace accounts are subject to admin policy. If your Google Workspace admin has restricted "Sign in with Google" to a whitelist, Plugipay might not be in it. Ask them to allowlist plugipay.com.
Account switching. If you have multiple Google accounts active in your browser, clicking Google sign-in shows the account chooser. We use whichever you select.

Common errors

"Provider not configured"

The button shouldn't have been visible. Refresh the page. If it persists, email hello@plugipay.com.

"Email already in use"

You're trying to sign up with Google, but a Plugipay account already exists for that email (created previously with email + password or another provider). Sign in to that account instead, then link the new provider from Settings → Security.

"Provider error"

A transient outage at Google or Apple. Try again in a minute. If persistent, sign in with email + password instead (if you have one).

"Email not verified by provider"

Rare, but it can happen with new Apple accounts that haven't confirmed their email yet. Complete the verification in Apple's settings, then retry.

Sign in — the day-to-day flow.
Sign up — creating a new account.
Authentication overview — the protocol-level details.