Link Multiple Auth Providers to an Account on Android

You can allow users to sign in to your app using multiple authentication providers by linking auth provider credentials to an existing user account. Users are identifiable by the same Firebase user ID regardless of the authentication provider they used to sign in. For example, a user who signed in with a password can link a Google account and sign in with either method in the future. Or, an anonymous user can link a Facebook account and then, later, sign in with Facebook to continue using your app.

Before you begin

Add support for two or more authentication providers (possibly including anonymous authentication) to your app.

To link auth provider credentials to an existing user account:

  1. Sign in the user using any authentication provider or method.
  2. Complete the sign-in flow for the new authentication provider up to, but not including, calling one of the FirebaseAuth.signInWith methods. For example, get the user's Google ID token, Facebook access token, or email and password.

  3. Get a AuthCredential for the new authentication provider:

    Google Sign-In

    Kotlin+KTX

    val credential = GoogleAuthProvider.getCredential(googleIdToken, null)
    MainActivity.kt

    Java

    AuthCredential credential = GoogleAuthProvider.getCredential(googleIdToken, null);
    MainActivity.java
    Facebook Login

    Kotlin+KTX

    val credential = FacebookAuthProvider.getCredential(token.token)
    MainActivity.kt

    Java

    AuthCredential credential = FacebookAuthProvider.getCredential(token.getToken());
    MainActivity.java
    Email-password sign-in

    Kotlin+KTX

    val credential = EmailAuthProvider.getCredential(email, password)
    MainActivity.kt

    Java

    AuthCredential credential = EmailAuthProvider.getCredential(email, password);
    MainActivity.java

  4. Pass the AuthCredential object to the signed-in user's linkWithCredential method:

    Kotlin+KTX

    auth.currentUser!!.linkWithCredential(credential)
    .addOnCompleteListener(this) { task ->
        if (task.isSuccessful) {
            Log.d(TAG, "linkWithCredential:success")
            val user = task.result?.user
            updateUI(user)
        } else {
            Log.w(TAG, "linkWithCredential:failure", task.exception)
            Toast.makeText(
                baseContext,
                "Authentication failed.",
                Toast.LENGTH_SHORT,
            ).show()
            updateUI(null)
        }
    }
    AnonymousAuthActivity.kt

    Java

    mAuth.getCurrentUser().linkWithCredential(credential)
        .addOnCompleteListener(this, new OnCompleteListener<AuthResult>() {
            @Override
            public void onComplete(@NonNull Task<AuthResult> task) {
                if (task.isSuccessful()) {
                    Log.d(TAG, "linkWithCredential:success");
                    FirebaseUser user = task.getResult().getUser();
                    updateUI(user);
                } else {
                    Log.w(TAG, "linkWithCredential:failure", task.getException());
                    Toast.makeText(AnonymousAuthActivity.this, "Authentication failed.",
                            Toast.LENGTH_SHORT).show();
                    updateUI(null);
                }
            }
        });
    AnonymousAuthActivity.java

    The call to linkWithCredential will fail if the credentials are already linked to another user account. In this situation, you must handle merging the accounts and associated data as appropriate for your app:

    Kotlin+KTX

    val prevUser = auth.currentUser
auth.signInWithCredential(credential)
    .addOnSuccessListener { result ->
        val currentUser = result.user
        // Merge prevUser and currentUser accounts and data
        // ...
    }
    .addOnFailureListener {
        // ...
    }
    MainActivity.kt

    Java

    FirebaseUser prevUser = FirebaseAuth.getInstance().getCurrentUser();
mAuth.signInWithCredential(credential)
        .addOnCompleteListener(new OnCompleteListener<AuthResult>() {
            @Override
            public void onComplete(@NonNull Task<AuthResult> task) {
                FirebaseUser currentUser = task.getResult().getUser();
                // Merge prevUser and currentUser accounts and data
                // ...
            }
        });
    MainActivity.java

If the call to linkWithCredential succeeds, the user can now sign in using any linked authentication provider and access the same Firebase data.

You can unlink an auth provider from an account, so that the user can no longer sign in with that provider.

To unlink an auth provider from a user account, pass the provider ID to the unlink method. You can get the provider IDs of the auth providers linked to a user by calling getProviderData.

Kotlin+KTX

Firebase.auth.currentUser!!.unlink(providerId)
    .addOnCompleteListener(this) { task ->
        if (task.isSuccessful) {
            // Auth provider unlinked from account
            // ...
        }
    }
MainActivity.kt

Java

mAuth.getCurrentUser().unlink(providerId)
        .addOnCompleteListener(this, new OnCompleteListener<AuthResult>() {
            @Override
            public void onComplete(@NonNull Task<AuthResult> task) {
                if (task.isSuccessful()) {
                    // Auth provider unlinked from account
                    // ...
                }
            }
        });
MainActivity.java