Shopware Single Sign-On(SSO)

Single Sign-On (SSO) plugin for Shopware allows your admins and customers to login into shopware using already existing Azure AD (Entra ID), Okta, Keycloak, and every other SAML 2.0, OAuth/OIDC, JWT SSO-compliant Identity Providers.

Request a Demo Pricing

What is the Shopware SSO Plugin?

The Shopware Single Sign-On (SSO) plugin lets users log in to your store using an existing account instead of creating a separate Shopware username and password.
Once Shopware Single Sign-On is set up, users click a single login button, sign in with their Identity Provider (IDP), and are automatically logged in to your store. The miniOrange plugin creates or updates user accounts using the information received from the IDP.
The plugin supports major SSO protocols like SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC). It works with popular identity providers such as Azure Active Directory, Okta, Google Workspace, Keycloak, and many more.

What You Can Do with the Shopware Single Sign-On (SSO)

Shopware SSO

Auto Create Users

When someone signs in through Shopware SSO for the first time, the plugin checks whether they already exist in your Shopware user list. If they don't, it creates their account automatically using the details from their identity provider so you never have to add users manually or ask them to register separately.
Admin/Customer Single Sign-On

Adds a Single Sign-On button to both the admin and customer login pages. Admins can sign in to the Shopware backend, and Customers can sign in to the storefront with the same one-click experience, all powered by your trusted identity provider.
Attribute Mapping

Attribute Mapping takes user details from your identity provider, like first name, last name, or email and automatically fills in the matching fields in Shopware. If your provider sends any extra information, you can map that too, so everything lands in the right place without any manual work.
Group & Role Mapping

Automatically assigns each user to the correct group and role based on the groups or roles your identity provider sends. With your mapping rules in place, the right people get the right level of access once they log in.
Multiple Stores / Sites

Set up SSO once and manage login access across all your Shopware stores from a single place.
Multiple IDPs Supported

Connect more than one identity provider at the same time. Different groups of users can sign in through their own provider, ideal for B2B stores where each partner or customer organization uses a different login system.

Secure Shopware Single Sign-On (SSO) for Your Store

Have questions about the Shopware Single Sign-On plugin? Contact our experts to learn how miniOrange helps you integrate identity providers for a secure, smooth login experience.

Book a Demo

How to Set Up Shopware SSO

The Shopware SSO plugin securely authenticates users and enables smooth access to your store via trusted identity providers.

Step 1

Install the Plugin

Download the miniOrange SSO plugin from the Shopware Store or upload it through your plugin manager. Activate it and open the miniOrange configuration panel in your Shopware admin.

Step 2

Select Idp

Choose from pre-built connectors. For Azure AD, Okta, Google, and others, required fields are pre-populated. For custom IDPs, enter SAML metadata URL or OIDC endpoint.

Step 3

Exchange metadata

Copy the Service Provider metadata URL from the plugin and register it in your IDP. Download the IDP metadata and upload it, or enter the IDP metadata URL directly.

Step 4

Test Shopware login

Use built-in test mode to run the authentication flow without enabling SSO for live users. Review the returned attributes and adjust mappings as needed.

Pricing Plans

Starter

For Individuals and Small Businesses

$29/month

Business Most Popular

Medium & Large Scale Businesses

$39/month

ENTERPRISE

For Enterprise Requirements

Starter

For Individuals and Small Businesses

$299/Year

Business Most Popular

Medium & Large Scale Businesses

$399/Year

ENTERPRISE

For Enterprise Requirements

Why Choose miniOrange Shopware SSO

miniOrange Shopware SSO provides secure, smooth login with simplified user access and management.

Multi-protocol support in one plugin

Most SSO plugins handle a single protocol. miniOrange supports SAML 2.0, OAuth 2.0, and OpenID Connect in one install, so you're never locked in and can support IDPs on different protocols at the same time.

Works with Shopware 6 (Self-Hosted & Cloud)

Fully supports Shopware 6 whether your store runs on your own servers or in the cloud, so you get the same smooth Single Sign-On experience wherever your store is hosted.

Trusted globally at enterprise scale

miniOrange products serve over 30,000 organizations, enterprises, universities, healthcare systems, and government agencies handling high-volume Shopware login traffic without performance loss.

24/7 Global Expert Support

Get direct access to product engineers across time zones for deployment assistance, troubleshooting, and ongoing guidance.

Frequently Asked Questions

Answers to Common Queries About Our Shopware Single Sign-On (SSO) Extension

Do My Users Need to Create a Separate Shopware Account?

No. Users can sign in to your Shopware store using their existing account from a supported identity provider, such as Microsoft, Okta, or Google Workspace. If they are logging in for the first time, the plugin can automatically create a Shopware account for them using the information provided by their identity provider.

Why should I add Single Sign-On to my Shopware store?

SSO removes the need for shoppers and staff to remember another password, which means fewer forgotten logins and support tickets. It also makes your store more secure your provider's login rules and multi-factor authentication apply automatically and gives B2B buyers a faster, smoother checkout experience.

Which login providers does it work with?

The plugin works with all the popular ones, including Azure AD / Microsoft Entra ID, Okta, Google Workspace, Keycloak, Auth0, Salesforce, Ping Identity, OneLogin, ADFS, AWS Cognito, and JumpCloud. If you use a different or in-house provider, it'll still work, and the support team can help you set it up.

Does it work with my Microsoft (Azure AD / Entra ID) accounts?

Yes. Microsoft is one of the most popular setups. Your users sign in with their existing Microsoft work accounts, and their Microsoft groups can automatically decide what they can access in your store.

Can I let both customers and admin log in with SSO?

Yes. You can add a Single Sign-On button to both the customer login page and the admin login page, so everyone signs in the same easy way.

Will it create accounts for new users automatically?

Yes. If someone signs in for the first time, the plugin creates their Shopware account automatically using the details from their login provider no manual work for you. Returning users simply get their info kept up to date.

Is the Shopware SSO Plugin secure?

Yes. Every login is verified before access is granted, and your provider's multi-factor authentication applies automatically. miniOrange follows recognized security standards (SOC 2 Type II) and uses industry best practices to keep logins safe.

Can I connect more than one login provider?

Yes. You can set up multiple providers at the same time useful for B2B stores where different customers or partner companies use different login systems. Each one can have its own settings and login button.

Does it work with both self-hosted and cloud Shopware stores?

Yes. The plugin fully supports Shopware 6, whether your store runs on your own servers or in the cloud.

How long does it take to set up?

For common providers like Azure AD, Okta, Google Workspace, and Keycloak, setup usually takes about 15 to 45 minutes, with step-by-step guides included. If you get stuck, support is available by live chat or email.

Want to Schedule a Demo?

Thank you for your response. We will get back to you soon.

Something went wrong. Please submit your query again