SAML Single Sign-On (SSO) For Shopify Using Workday as Identity Provider

Pre-requisite: Single Sign On - SSO Login Application

• To configure SSO into Shopify with Workday as IDP, you will need to install the miniOrange Shopify Single Sign On - SSO Login Application on your store:

  

  Shopify Single Sign-On (SSO)

  By miniOrange

  miniOrange Provides Secure Single Sign-On (SSO) access to your Shopify store (both plus and Non-plus).

  Get this application
• Contact the Workday Client Support team to get the IDP metadata values.

Step by Step guide for Configuring Workday as IDP for SSO into Shopify

1.  Configure Shopify as SP in Workday

• Login to Workday Admin Console.
• Navigate to the Edit Tenant Setup - Security page by searching for Edit Tenant Setup in the home screen search box and then click the Edit Tenant Setup - Security option in the search results.

• Scroll down to the Single Sign-On section and expand it, if not already expanded.
• Click on the plus icon underneath Redirection URLs to add a row.
• For the above SAML configuration, you need to get the Entity ID and ACS URL from Shopify.
• Now go to your Shopify store and navigate to the App section and click on Single Sign On - SSO login application.

• Click on the Setup IDP button in the left navigation bar.

• Click on Configure SSO >> Add Identity Provider.

• Select SAML protocol. Now click on the Click here link to get miniOrange metadata as shown in the Screen below.

• For SP - INITIATED SSO section Select Show Metadata Details.

• Copy down the ACS URL, Single Logout URL, X.509 Certificate, Entity ID or Issuer, and SSO Logout URL values and keep them handy as these will be used in further steps.
• Navigate back to the Workday application.
• Enter the Login Redirect URL, Logout Redirect URL, Mobile App Login Redirect URL, and Mobile Browser Login Redirect URL from here and enter Environment.

• Scroll down to the SAML Setup section. Check the Enable SAML Authentication box.

• Click on the plus (+) icon underneath SAML Identity Providers to add a row, and then enter Identity Provider Name, Issuer and X509 Certificate from here.
• Save the settings.

You have successfully completed the Workday side configuration.

2.  Configure Workday as IDP in Shopify

• Again navigate to the App section of the Shopify store and click on Single Sign On - SSO Login application.

• Click on the Setup IDP button in the top left in the navigation bar.

• From the left navigation bar select Configure SSO and click on Add Identity Provider.

• Select SAML and enter values that you get from the Workday Client Support team .

• Click on Save.

You have successfully completed Shopify side configuration.

3.   Test Connection

• Go to Configure SSO tab.
• Click on the Select >> Test Connection option against the Identity Provider you configured.

• On entering valid Workday credentials you will see a Test Successful window.

4.   Testing SSO for your Shopify Store

• Go to your Shopify Store login page.(https://<your-shopify-storedomain>/account/login)
• Click on the login button you customized earlier.

• You’ll be redirected to the login page of the IDP you configured in the previous step. Log in with your IDP account credentials.
• You’ll be successfully logged in to your Shopify store.

Hence your configuration of Workday as IDP in Shopify is successfully completed.

Choose your preferred Identity Provider and start setting up SSO for Shopify right away

Additional Resources

• Shopify Security Solutions
• Shopify Single Sign-On (SSO)
• Shopify SCIM Provisioning Deprovisioning
• Shopify Two-Factor Authentication
• Shopify Single Sign-On (SSO) using Azure B2C
• Shopify Secure Admin Login

If you are looking for anything which you cannot find, please drop us an email at shopifysupport@xecurify.com.