SAML Single Sign-On (SSO) For Shopify Using OpenAthens as Identity Provider

To access customer login on your Shopify storefront, first check if the account/login button is visible in the navbar. If it is, go directly to the storefront login. If it isn’t, go to Shopify Admin >> Settings >> Customer Accounts. Enable Show login link in the header of the online store and at checkout option.

• For Legacy Shopify Customer Accounts, click the account/login link or visit /account/login. Then select the OpenAthens SSO Login widget above the email and password fields. Enter your OpenAthens credentials, and you will be logged in.
• For Shopify Customer Accounts, click the user icon at the top right of the store. Log in through the redirected OpenAthens login page using your credentials. Complete the one-time 6-digit OTP verification to access the store.

For detailed steps, follow the steps provided in the documentation.

After setting up OpenAthens SSO for Shopify, you can configure where customers are redirected after they log in. Open the Shopify SSO application for OpenAthens and go to More Actions, then Additional Settings. In the Post Login Configurations tab, enter the redirect endpoint you want. For example, use /cart or /collections, but do not include the full URL. If needed, enable the Restrict User SignUp option, then save your configuration. Refer to the instructions for a complete step-by-step guide.

To enable the Auto-Redirect to OpenAthens feature, you first need to upgrade the Shopify SSO application for OpenAthens to the Enterprise (Scale) plan. Go to Apps >> miniOrange Single Sign-On (SSO), open the Pricing section, and click Upgrade under the Scale Plan.

After upgrading, go to the Global Configurations tab. Enable Auto Redirect to IDP under Store Access Settings. If a warning appears, follow the provided link to enable the required extension. Then choose whether the feature applies to the entire store or just the the login page. Finally, click Save to activate Auto-Redirect to OpenAthens on your Shopify store.

Follow these instructions for detailed setup information.

To enable users to log in to your Shopify store using their institutional credentials, you can set up Single Sign-On (SSO) using OpenAthens as your identity provider (IdP) and Shopify as the service provider (SP). This will allow users to authenticate via their OpenAthens credentials, providing a seamless login experience.

Here’s how to set it up OpenAthens SSO for Shopify so users log in with their OpenAthens credentials:

OpenAthens as the Identity Provider (IdP): Provide the Entity ID and the ACS (Assertion Consumer Service) URL from the Shopify SSO application. In OpenAthens, add a new SAML connection under Management >> Connections and copy the Relying party Metadata URL for the next step.

Shopify as the Service Provider (SP): In the Shopify SSO app, select the SAML protocol. Choose OpenAthens as an identity provider. Click on Import IdP Metadata and paste the Relying party Metadata URL into the required field.

By following these steps, users can now log in to the Shopify store using their OpenAthens credentials, eliminating the need for separate Shopify login credentials.

Yes, it is possible to redirect users to specific pages or sections of your Shopify store after they log in via OpenAthens SSO.

Here's how to set it up:

Configure OpenAthens as the Identity Provider (IdP): In the SSO application, configure OpenAthens as the IdP with its metadata. Ensure that OpenAthens is properly set up to authenticate users for your Shopify store.

Configure Shopify as the Service Provider (SP): Import the OpenAthens IdP metadata into Shopify’s SSO settings. Enable SSO login for your users, allowing them to authenticate with their OpenAthens credentials.

Set Up Custom Redirection: Under the post-login configurations, specify the URL or endpoint where you want users to be redirected after logging in. For example, you can set it to direct users to the cart page (/cart), account page (/account).

By following these steps, you can successfully configure Shopify to redirect users to different pages after they authenticate using OpenAthens via SSO.

To enable Single Sign-On (SSO) for multiple Shopify storefronts using OpenAthens, follow these steps:

Install the Shopify SSO app: Install it on each of your Shopify storefronts. This application is compatible with both Shopify Plus and non-Plus stores. The miniOrange app supports various SSO protocols, including SAML, ensuring compatibility for all storefronts.

Configure OpenAthens as the Identity Provider (IdP): Use OpenAthens as your Identity Provider (IdP) to authenticate users across multiple storefronts. Configure a separate SAML connection in OpenAthens for each storefront's SP metadata.

Configure the Shopify SSO app for all storefronts: On each Shopify storefront, select the SSO protocol as SAML. Enter the OpenAthens Relying party metadata URL and other required details for each storefront.

By following these steps, you can easily configure SSO with OpenAthens for multiple Shopify storefronts, allowing users to log in seamlessly across all stores.

Yes, it is possible to disable Shopify’s default login and force all users to log in through OpenAthens SSO only. Here’s how you can achieve this:

Set Up OpenAthens as the Identity Provider (IdP): Use OpenAthens as your Identity Provider (IdP) for authentication, ensuring that the SSO authentication is configured using the SAML protocol.

Shopify SSO app: Select SAML as the authentication protocol. Import the OpenAthens Relying party metadata URL and configure the other relevant settings for the SSO integration.

By following these steps, you can completely disable the default Shopify login and enforce OpenAthens SAML-based SSO for all user logins to your Shopify store.