# Social Accounts Management

_Last updated: 29 January 2026_

## Definitions

- **AI visibility**: How often and in what context AI assistants mention a brand.
- **Credits**: Usage units billed per action (e.g., scans, generations).

## Breadcrumbs

Citedy > AI > Features > Social Accounts Management

```json
{
  "@context": "https://schema.org",
  "@type": "BreadcrumbList",
  "itemListElement": [
    {
      "@type": "ListItem",
      "position": 1,
      "name": "Citedy",
      "item": "https://www.citedy.com/"
    },
    {
      "@type": "ListItem",
      "position": 2,
      "name": "AI",
      "item": "https://www.citedy.com/ai/index.md"
    },
    {
      "@type": "ListItem",
      "position": 3,
      "name": "Features",
      "item": "https://www.citedy.com/ai/features/"
    },
    {
      "@type": "ListItem",
      "position": 4,
      "name": "Social Accounts Management",
      "item": "https://www.citedy.com/ai/features/social-accounts.md"
    }
  ]
}
```

> Manage Connected LinkedIn, Facebook, and X Accounts

## Overview

Social Accounts Management provides centralized control over all your connected social media accounts. Secure OAuth authentication, encrypted token
storage, and granular permissions ensure safe and efficient social media operations.

## Capabilities

### Account Connection

- OAuth 2.0 secure authentication
- Single-click connection flow
- Multiple accounts per platform
- Automatic token refresh

### Account Management

- View all connected accounts
- Monitor connection status
- Disconnect accounts instantly
- Reconnect with one click

### Permission Management

- Page-level access for Facebook
- Profile-level access for LinkedIn
- User-level access for X

### Token Security

- AES-256-GCM encryption
- Automatic token refresh
- Secure storage
- Audit logging

## Supported Platforms

### LinkedIn

- **Connection**: OpenID Connect (OIDC)
- **Scopes**: `openid profile email w_member_social`
- **Access**: User profile and UGC posts
- **Pages**: Not supported (profile only)

### Facebook

- **Connection**: OAuth 2.0
- **Scopes**: `pages_show_list pages_manage_posts pages_read_engagement`
- **Access**: User profile and selected pages
- **Pages**: Multiple pages supported

### X (Twitter)

- **Connection**: OAuth 2.0
- **Scopes**: `tweet.read tweet.write users.read offline.access`
- **Access**: User profile and tweets
- **Accounts**: Multiple accounts supported

## Technologies

- OAuth 2.0 protocols
- AES-256-GCM encryption
- Supabase Auth integration
- Platform API clients
- Token refresh logic

## Security Features

### Token Encryption

- 256-bit AES encryption
- GCM mode for authentication
- Base64 encoded storage
- Key rotation support

### Token Refresh

- Automatic refresh before expiration
- Seamless user experience
- No re-authentication needed
- Refresh alerts

### Access Control

- Tenant-level isolation
- User-specific connections
- Read/write permission checks
- Audit trail for all actions

## Use Cases

1. **Account Management**: Manage multiple social media accounts centrally
2. **Team Collaboration**: Share connected accounts with team members
3. **Security Monitoring**: Track all connection activities
4. **Token Management**: Ensure tokens stay valid and refreshed
5. **Access Control**: Grant appropriate permissions per account

## Account Connection Flow

### Step 1: Initiate OAuth

- User clicks "Connect" for platform
- App initiates OAuth flow
- Redirects to platform authorization

### Step 2: User Authorization

- Platform displays permissions
- User grants access
- Platform redirects back to app

### Step 3: Token Exchange

- App receives authorization code
- Exchanges code for access token
- Stores encrypted token in database

### Step 4: Account Verification

- App verifies token validity
- Retrieves account information
- Creates account record

## Token Management

### Automatic Refresh

- Monitor token expiration
- Refresh before expiry
- Update encrypted storage
- Seamless user experience

### Manual Refresh

- User can force refresh
- Useful if connection issues
- Maintains same OAuth session
- No re-authentication needed

### Disconnection

- Immediate token deletion
- Clear encrypted storage
- Remove account records
- Revoke platform access (optional)

## Related Features

- [Social Publishing](/ai/features/social-publishing.md)
- [Scheduled Publishing](/ai/features/scheduled-publishing.md)
- [X Intent Scout](/ai/features/x-intent.md)