Zendesk Single Sign-On (SSO) using Shopify store as Identity Provider

Pre-requisite : Store as IDP - SSO Login Application

To configure SSO into Zendesk with Shopify store as IDP, you will need to install the miniOrange Shopify Store as IDP Application on your store:

Step by Step guide for Configuring Single Sign-On (SSO) into Zendesk using Shopify Store as IDP

1.  Configure Zendesk as Service Provider (SP) in Shopify

• Go to your shopify store, click on Apps tab and select Store as IDP - SSO login application.

• Click on the Setup Application button in the left navigation bar.

• From the left navigation bar select Apps and click on Add Application button.

• Search for Zendesk and then Click on Zendesk Application.

• In the Add Application Section and Add Policy Section, enter the values by refering the below table.


Custom Application Name	Choose appropriate App name
SP Entity ID or Issuer	https://your_domain.zendesk.com/
ACS URL	https://your_domain.zendesk.com/access/saml
Single Logout URL	http://samldemo.zendesk.com/home
Name ID	E-Mail Address
Name ID Format	urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
Audience URI	https://your_domain.zendesk.com/access/saml
Group Name	DEFAULT
Policy Name	Zendesk
Login Method	Password

• Click on Save button.
• Your application is saved successfully. Now click on the Select button against your newly created application. Go to Metadata.

• On the Metadata page, click on Show Metadata Details under INFORMATION REQUIRED TO AUTHENTICATE VIA EXTERNAL IDPS. Keep the Information handy as these will be used in furthur steps.

You have successfully configured Shopify side configuration.

2.  Configure Shopify as Identity Provider (IDP) in Zendesk

• Login to your Zendesk account domain at https://[your-subdomain].zendesk.com/admin/security/sso.
• Click on the Settings icon in the left pane.
• Navigate to Account section and click on Single sign-on tab in the left pane.

• Click on Edit.
• Enter SAML SSO URL, Certificate fingerprint and Remote logout URL value in the required fields that you got from Step 1.

Note: Copy the X.509 Certificate from here, and convert it into SHA256 fingerprint certificate using any external convertor.

• (OPTIONAL) IP ranges: Enter your IP ranges. Requests from these IP ranges will always be routed via remote authentication. Requests from IP addresses outside these ranges will be routed to the normal sign-in form.

• Click on Save button to save the Single Sign-On (SSO) SAML settings.
• If you want to enable enterprise SSO with SAML for Staff members and/or for End users, go to the corresponding tab, check External authentication, then click Save:
• Staff Members:

• End Users:

• Now navigate to the Guide Section in Zendesk application.

• Go to Guide admin scetion and navigate to the Guide Setting in Zendesk application.

• Now navigate to the setting >> guide setting and then click on Activate to activate help center.

You have successfully configured Zendesk side configuration.

4.  Testing Single Sign-On (SSO) for your Zendesk Application

• Go to your Zendesk application and click on SIGN IN button.

• You will be redirected to Shopify store Sign on Page. Enter your Shopify Store login credentials and click on Sign in.

• You will be successfully logged in to your Zendesk application.

You have successfully configured Shopify store as an Identity Provider for your Zendesk application.