Invision Community Single Sign-On (SSO) using Shopify as an Identity Provider (IdP)

Overview

Configure Single Sign-On (SSO) for Invision Community using your Shopify store as an identity provider (IdP). miniOrange provides a ready-to-use solution using your Shopify store. This solution ensures that you are ready to roll out secure access to your Invision Community account using Shopify store credentials within a few clicks.

miniOrange provides secure access and full control to Invision Community for enterprises and applications. With the help of this guide you can configure SSO for Invision Community seamlessly.

Pre-requisites: Store as IdP - SSO Login Application

To configure single sign-on into Invision Community with Shopify as an identity provider (IdP), you have to install the miniOrange: Store as IdP- SSO Login application on your Shopify store.

Configuration Steps

Step-by-Step guide for configuring SSO into Invision Community using Shopify store as an identity provider (IdP)

Step 1: Configure Invision Community as Service Provider (SP) in Shopify

• Go to your Shopify store, click on Apps tab and select Store as IdP - SSO login to Apps application.

• From the left navigation bar select Apps and click on Add Application button.

• Go to the OAuth/OIDC tab and select the IdP name as an OpenID Connect from the list.

• Fill in the below mentioned fields by referring to the table below:

Client Name	Choose an appropriate name
Redirect URI/ OAuth Callback URI	You will get this from Step 2.
Description	Add appropriate description
Group Name	DEFAULT
Policy Name	Invision Community
Login Method	Password

• After saving the application, click on Select and then Edit option of the application you just configured.

• Here, you will get the Client ID and Client Secret.
• Keep these values handy as you will require them later while configuring Shopify as an identity provider.

• In the below image, you will find all the required endpoints such as Authorization, Token and Userinfo.

You have completed the Shopify side configurations.

Step 2: Configure Shopify as Identity Provider (IdP) in Invision Community

• Log in to your Invision Community account and navigate to the AdminCP dashboard.
• Under Settings, click on Login & Registration in the left pane.

• Select handler as Other OAuth 2.0 and click on Continue.

• Under the Basic Settings section, enter an appropriate method name.

• Take note of the Redirect URL under the Application Settings highlighted in the image below.
• Fill in the below fields by referring to the values in the table below:

Client Identifier	Choose an appropriate name
Client Secret	You will get this from Step 1.

Scopes to request	email, user, openid, profile
Authorization Endpoint	You will get this from Step 1.

• Fill in the Token Endpoint, Userinfo Endpoint, and User ID parameter.

Token Endpoint	You will get this from Step 1.
Userinfo Endpoint	You will get this from Step 1.
User ID Parameter	email

• Enter an appropriate login button text.

You have successfully completed the Invision Community side configurations.

Step 3: Testing Single Sign-On (SSO) for your Invision Community Application

• Go to your Invision Community application and click on the Login via SSO button.

• You will be redirected to the login page of your Shopify store.
• Enter your Shopify Store login credentials and click on the Sign in button.

• You will be successfully logged in to your Invision Community application.

Hence, you have successfully configured Single Sign-On (SSO) for your Invision Community application using Shopify store as an Identity Provider.

Let's begin and Setup Single Sign-On (SSO) with popular Service Providers

Additional Resources

• Shopify Security Solutions
• Shopify Single Sign-On (SSO)
• Shopify Content restriction
• Shopify Subscription
• Convert Shopify Store into LMS platform

Get in Touch

Please reach out to us at shopifysupport@xecurify.com, and our team will assist you with setting up the application. Our team will help you to select the best suitable solution/plan as per your requirement.