Search Results :

×
Sign Up Contact Us

Contents

Single Sign-On (SSO) for Shopify Using Microsoft365 as an Identity Provider

miniOrange allows Microsoft365 (formerly known as Office365) to act as an IDP (Identity Provider), which allows users to Single Sign-On (SSO) into Shopify using Microsoft365 credentials. Our application is compatible with all the SAML / OAuth compliant Identity Providers. We will go through a step-by-step guide to configure Single Sign-On (SSO) into Shopify using Microsoft365 as IdP (Identity Provider) and Shopify store as SP (Service Provider).

Shopify Microsoft365 SSO Login - download plugin button Download Application Shopify Microsoft365 SSO Login - application pricing button Shopify Microsoft365 SSO Login - plugin pricing button Pricing Plans

To configure SSO into Shopify using Microsoft365 as an identity provider (IDP), you will need to install the miniOrange Shopify Single Sign-On - SSO Login Application on your store.


Youtube-color Created with Sketch.

Check out our video, to know more about how Single-Sign-On works in Shopify.

Follow the step-by-step guide to configure Single Sign-On in Shopify store using Microsoft365 as an identity provider.

  • Go to your Shopify store and navigate to the App section and click on Single Sign On - SSO login application.
Shopify Microsoft365 SSO Login - Add SSO Application

  • Click on the Add identity Provider button to add your IDP.
Shopify Microsoft365 SSO Login - Add Identity Provider

  • Select OAuth 2.0 protocol.
Shopify Microsoft365 SSO Login - Select SAML Protocol

  • Now choose Office365 from the list of IDPs.
Shopify Microsoft365 SSO Login - Select Microsoft365 from IDP List

  • Copy the OAuth Callback URL and keep it handy as it will be used in furthur step.
Shopify Microsoft365 SSO Login - Click on Get Metadata

  • Sign in to Azure portal.
  • Click on App Services and go to Manage Azure Active Directory.
Shopify Microsoft365 SSO Login -Home-Microsoft-Azure

  • In the left-hand navigation panel, click the App registrations service, and click New registration.
Shopify Microsoft365 SSO Login - App-Registration

  • Configure the following options to create a new application.
  • Enter a name for your application under the Name text field.
  • In supported account types, select 3rd option ‘Accounts in any organizational directory (Any Azure AD directory - Multitenant) and personal Microsoft accounts (e.g. Skype, Xbox)’
  • In the Redirect URI section, select the Web application and enter the Callback URL from the Shopify SSO application and save it under the Redirect URL textbox.
  • Click on the Register button to create your application.
Shopify Microsoft365 SSO Login - Overview

  • A unique Application ID is assigned to your application by Azure AD. Keep the Application ID and the Directory ID handy, they will become your Client ID and Tenant ID, which will be needed later to configure the miniOrange Shopify SSO application.
Shopify Microsoft365 SSO Login -registration app

  • Go to API permissions from the left navigaton pane and click on Add permissions. Then select Office 365.
Shopify Microsoft365 SSO Login -Overview

  • Select permissions and click on Add Permissions button.
Shopify Microsoft365 SSO Login -Request-api-permissions

  • Go to Certificates and Secrets from the left navigaton pane and click on New Client Secret. Enter description and expiration time and click on ADD option.
Shopify Microsoft365 SSO Login - secret-Key

  • Copy the secret key "value" and keep the value handy it will be required later to configure Client Secret under the Shopify SSO application.
Shopify Microsoft365 SSO Login - Secret-Key-2

You have successfully completed your Microsoft365 configurations.

  • Navigate back to the miniOrange Single Sign On-SSO application and click on Add identity Provider button.
Shopify Microsoft365 SSO Login - go to SSO application

  • Select OAuth 2.0 protocol.
Shopify Microsoft365 SSO Login - Select SAML Protocol

  • From the list of IDPs, select Office365.
Shopify Microsoft365 SSO Login - Choose Microsoft365 as IDP

  • Fill out the following fields by referring the below table.
Shopify Microsoft365 SSO Login - Choose Microsoft365 as IDP

IdP Display Name Choose appropriate Name
Authorize Endpoint https://login.microsoftonline.com/{tenant-id}/oauth2/authorize
Access Token Endpoint https://login.microsoftonline.com/{tenant-id}/oauth2/token
Get User Info Endpoint https://graph.microsoft.com/v1.0/me
Client ID From step 2
Client secret From step 2
Scope openid
  • Click on Save.
  • After saving the IDP configuration, you will be redirected to Test Connection step.
  • Please perform Test Connection before mapping or fetching attributes, test connection ensures that your IDP configuration is correct.
  • Click on the Test Connection button.
Shopify Microsoft365 SSO Login - Click Test Connection

  • On entering valid Microsoft365 account credentials you will see a pop-up window which is shown in the below screen.
Shopify Microsoft365 SSO Login - Test Connection with Microsoft365

  • Click on the Fetch Attributes button to fetch IDP attribute.
Shopify Microsoft365 SSO Login - Fetch identity provider attributes
  • Click on the + Attribute Mapping button to map attributes between Shopify and Microsoft365.
Shopify Microsoft365 SSO Login - Add Attribute Mapping

  • Map the attributes by refering the table below:
Shopify Microsoft365 SSO Login - Map the Microsoft365 attributes

Attribute Name in Shopify Choose the attribute from the list of predefined attributes
Attribute Type IDP Attribute
Attribute Value Select the attribute value you have fetched from your IDP
  • Click on Save.
Shopify Microsoft365 SSO Login - Save attribute mapping
Shopify SSO Login - Enable SSO Login Button

Note: This step applies only to Shopify legacy accounts and not Shopify customer accounts.


  • Navigate to the Enable SSO Button section.
  • The following button attributes can be customized: button text, text below SSO button, background color, text color, width, and height.
Shopify SSO Login - Edit SSO Button

  • By default, the “Enable SSO Button” option is in enabled state.
  • If it is not, enable it first, then click the Enable Extension button, as shown in the image below.
Shopify SSO Login - Enable Extension

  • Enable the SSO Login Widget IDP extension.
  • You will see the Login with miniOrange button added to your Shopify store.
  • Click on Save
Shopify SSO Login - Enable SSO Login Widget
More FAQs ➔

Follow the steps outlined here to configure SSO in Shopify with your preferred IDP.

Redirection to any other site might be blocked in the browser. Please follow the steps given here to resolve the issue.

Follow the steps outlined here to redirect your customer to collections/cart or any other page.

You must upgrade to the SSO application’s Enterprise plan to enable the Auto-Redirect to the IDP feature. Follow the steps outlined here to enable this feature.

Please reach out to us at shopifysupport@xecurify.com, and our team will assist you with setting up the Shopify SSO application. Our team will help you to select the best suitable solution/plan as per your requirement.

ADFS_sso ×
Hello there!

Need Help? We are right here!

support