Can anyone recommend a best practise guide for this sign in workflow?

Looking to auth our users via Facebook to then subsequently auth for our apis via an api gateway.

Sorry for the nooby question, been a while since I dealt with oauth and want to be sure I’m not missing something useful!