You get a Token URL is not whitelisted error

You’ve configured social login, and your social login identity providers are showing up on the sign-in screen:

However, when you click the Facebook button, you don’t get redirected to Facebook’s login page; instead, you see an error similar to this:

Is that the way this is supposed to work?

No. But that’s the way it will work if your Capture domain and your rpxnow domain aren’t included in your set of allowed social login domains.

To verify which domains are (and which domains aren’t) included in your domain allow list, log on to your Social Login Dashboard (https://dashboard.janrain.com), click Settings, and then check the Domain Whitelist section:

As the preceding screenshot shows, neither our Registration (Capture) domain nor our rpxnow domain are included in the list. Can we fix that? You bet we can. All we have to do is add the two domains and then click Save:

Do that and clicking the Facebook button will have the expected results: