FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Security

Sign In with LinkedIn

EssentialOfficial website

Sign In with LinkedIn lets visitors authenticate using their LinkedIn account, loading the LinkedIn SDK which sets cookies and shares data with LinkedIn, a Microsoft company.

Block Sign In with LinkedIn until consentScan my site
Overview

What does Sign In with LinkedIn do?

What it is

Sign In with LinkedIn is an authentication option that lets users log in or register on your site using their LinkedIn account, through the OAuth protocol. Implementing it usually means loading LinkedIn scripts or redirecting to LinkedIn, and LinkedIn is owned by Microsoft. It is popular on professional and B2B sites.

Cookies and data it collects

When the LinkedIn button or SDK loads, LinkedIn can set cookies such as bcookie and lidc that are used for security and for LinkedIn own analytics and advertising. During sign in, the user shares profile data such as name, email and headline with your application, and LinkedIn receives the request details including the IP address.

GDPR and ePrivacy implications

The authentication a user actively chooses can rely on their request, but the LinkedIn tracking cookies that load alongside are non essential and need consent under Article 5(3) of the ePrivacy Directive. The profile data you receive is personal data you must handle under the GDPR.

Consent requirements

Do not load the LinkedIn SDK or its tracking cookies before consent; ideally trigger it only when the user clicks the sign in button. Tell users what profile fields you will receive and why, and obtain consent for any LinkedIn advertising cookies separately.

Data transfers

LinkedIn operates from the United States with an EU establishment in Ireland. Data may be processed in the United States, relying on the EU US Data Privacy Framework, under which Microsoft is certified, or Standard Contractual Clauses. Reference this in your privacy notice.

Practical compliance steps

Load LinkedIn only on user action, request the minimum profile scopes, document the data you receive and gate any LinkedIn tracking cookies behind consent. Disclose the Microsoft and United States involvement and offer an alternative sign in method.

Compliance

Sign In with LinkedIn and the GDPR

Sign In with LinkedIn is classified as “Essential”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent under Article 6(1)(a) GDPR for tracking cookies; contract or the user request for the authentication itself
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive

Impact assessment (DPIA)

A DPIA is usually not required for optional social sign in, but consider one if you combine LinkedIn data with profiling or process it at scale. Assess the tracking cookies, the profile scopes and the United States transfer.

Sample text for your banner

You can sign in with LinkedIn. Using it loads LinkedIn, which sets cookies and shares data with LinkedIn in the United States. LinkedIn tracking cookies load only if you accept.
Cookies and trackers

What Sign In with LinkedIn sets and contacts

Tracking method
OAuth sign in button and JavaScript SDK with authentication and tracking cookies
Server location
United States and Ireland (LinkedIn, a Microsoft company)
Data transferred outside the EU
LinkedIn is a Microsoft company with operations in the United States and an EU establishment in Ireland. Authentication and any tracking data may be processed in the United States under the EU US Data Privacy Framework or Standard Contractual Clauses.

Cookies set (3)

NameTypeDurationPurpose
bcookieAdvertising1 yearBrowser identifier cookie set by LinkedIn for security and to enable advertising and analytics features.
lidcFunctional1 dayUsed by LinkedIn for data centre routing and to support the sign in flow.
li_gcFunctional6 monthsStores the visitor consent state for the use of non essential LinkedIn cookies.

Third-party domains contacted (3)

  • linkedin.com
  • licdn.com
  • px.ads.linkedin.com
Questions

Frequently asked questions about Sign In with LinkedIn

Can't find your question? Write to us, we answer fast.

Does Sign In with LinkedIn set cookies?

Yes, the LinkedIn SDK can set cookies such as bcookie and lidc used for security, analytics and advertising, in addition to processing the sign in request and the visitor IP.

Do I need consent?

The authentication the user actively starts can rely on their request, but the LinkedIn tracking and advertising cookies are non essential and require prior consent.

What is the legal basis?

Use contract or the user request for the sign in itself, and consent under Article 6(1)(a) plus the ePrivacy rule for LinkedIn tracking cookies. Handle the profile data you receive under a clear basis.

Does it transfer data to the United States?

Yes, LinkedIn is a Microsoft company operating from the United States with an EU establishment in Ireland. Transfers rely on the EU US Data Privacy Framework or Standard Contractual Clauses.

Do I need a DPIA?

Optional social sign in rarely needs a DPIA, but consider one if you profile users or process LinkedIn data at scale. Assess the tracking cookies, scopes and transfer.

How do I implement it compliantly?

Load LinkedIn only when the user clicks sign in, request minimal scopes, gate tracking cookies behind consent and disclose the Microsoft and United States involvement. Offer an alternative login.

Are there alternatives?

You can offer email and password login, a European identity provider or other social logins. Minimising third party sign in reduces tracking and transfer concerns.

How do I update my cookie policy?

List the LinkedIn cookies such as bcookie and lidc with their purpose and duration, state that tracking cookies load only after consent and disclose the United States transfer.

Same category

More services: Security

See the whole category

Imunify360

Imunify360 is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Imunify360 integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Imunify360 helps organizations maintain robust websites that meet user expectations and technical requirements.

Essential

Kount

Kount is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Kount integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Kount helps organizations maintain robust websites that meet user expectations and technical requirements.

Essential

Clever

Clever is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Clever supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Clever ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Security

Anubis

Anubis is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Anubis supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Anubis ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Essential

VentryShield

VentryShield is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. VentryShield integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, VentryShield helps organizations maintain robust websites that meet user expectations and technical requirements.

Essential

Tencent Waterproof Wall

Tencent Waterproof Wall is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Tencent Waterproof Wall integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Tencent Waterproof Wall helps organizations maintain robust websites that meet user.

Security

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site