Circle.so Single Sign-On (SSO) using Shopify store as Identity Provider

Pre-requisite : Store as IDP- SSO Login Application

To configure SSO into Circle.so with Shopify as IDP, you will need to install the miniOrange Store as IDP- SSO Login Application on your store

Step by Step guide for Single Sign-On in Circle.so Using Shopify Store as an IDP

1. Step to get the Redirect URI for Shopify store

• Signup/Log into your Circle.so instance as an admin.
• Navigate to Circle.so Settings → Single Sign-On. Scroll down to the OAuth provider section and copy the Callback/Redirect URL. Keep the Callback/Redirect URL handy as you will need it later.

2. Configure Circle.so in shopify

• Go to your shopify store, click on Apps tab and select Store as IDP-SSO login application.

• From the left navigation bar select Apps and click on Add Application button.

• Go to OAuth/OIDC tab and select the IDP name as a OpenID Connect from the list.

• For Client Name enter the name of your application or anything as per your choice. Enter the Redirect URL which we got from step1.

• Now, scroll down and select the DEFAULT from the Group Name dropdown.
• Now enter the name for your app authentication policy in the Policy Name field.
• Select Password as your login method. Click on Save button.

• After saving the application, click on Select and then Edit option of the application you just configured.

• You will get the Client Id, Client Secret, Endpoints and Scopes. Keep these values handy as you will need them later.

• Now, from the left navigation bar go to the Apps and click on GO back to store button from the top right side.

• You have successfully configured Circle.so application in Shopify Store.

3. Configure SSO in Circle.so Admin Account.

• Log into your Circle.so instance as an admin.
• Navigate to Circle.so Settings → Single Sign-On, and Enable the SSO.

• Select "Custom" as the OAuth provider.
• Now, fill in the required details like Client ID, Client Secret, Endpoints, and Scope.

• Please refer to the below table for configuring the values.

Provider Name	Display name of your choice
OAuth Authorize Endpoint	https://store.xecurify.com/moas/broker/login/oauth/
OAuth Access Token Endpoint	https://store.xecurify.com/moas/rest/oauth/token
OAuth Get User Info Endpoint	https://store.xecurify.com/moas/rest/oauth/getuserinfo
Client ID	From step 2
Client secret	From step 2
Scope	email profile openid

• Add the sub for User ID response path, User Email response path and User Name response path as shown in the below image. Click on save changes button.

4. Testing SSO for Circle.so

• Go to your Circle.so login page.
• Click on the Login button and you will be redirected to the login page of your Shopify store.

• Enter your Shopify Store login credentials and click on Login. You will be automatically logged in to your Circle.so account.

You have successfully configured Shopify as Identity Provider for your Circle.so application.