Canvas Single Sign-On (SSO) using Shopify Store as Identity Provider

Pre-requisite : Store as IDP - SSO Login Application

To configure SSO into Canvas LMS with Shopify as IDP, you will need to install the miniOrange Store as IDP- SSO Login Application on your store

Store as IDP- SSO login to Apps

By miniOrange

miniOrange Provides Secure Single Sign-On (SSO) access to your web services/application using Shopify Store as IDP.

Get this application

Follow the Step-by-Step Guide given below for configuring SSO into Canvas LMS using Shopify Store as IDP

1. Configure Shopify store as IdP (Identity Provider)

• You would need Entity ID , ACS URL from Canvas LMS .
• You can find this information under Current Provider in Authentication section under Admin tab.
• Click on the Link to find Metadata file containing all the information of your Service Provider
  (Canvas LMS).

• Now go to your shopify store, click on Apps tab and select Store as IDP-SSO login application.

• From the left navigation bar select Apps and click on Add Application button.

• Go to SAML tab and search for canvas and select Canvas LMS (SAML).

• Enter the values corresponding to the information from Canvas LMS. Refer to the table below.

Service Provider Name	Name of your Service Provider.
SP Entity ID or Issuer	Copy and paste the SP-Entity ID from Canvas LMS.
ACS URL	Copy and paste the ACS URL from Canvas LMS.
NameID Format	urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
Assertion Signed	Checked

• Click on the Save button to save your configuration.
• Now navigate to Select option and choose Metadata tab.

• Now click on Show Metadata Details under INFORMATION REQUIRED TO AUTHENTICATE VIA EXTERNAL IDPS section. Copy down these data as they will be used in furthur steps.

You have successfully completed Shopify side configurations.

2. Configure Canvas LMS as Service Provider

• Login to your Canvas LMS domain as an Account Administrator.
• Switch to Admin view by clicking on the corresponding link from the bottom of the screen.
• Select Admin from the left pane and select the domain for which you wish to enable Single sign-on.

• Click on Authentication in the left pane and navigate to SAML

• Enter the values by referring to the table below.

IDP Metadata URI	Enter the Metadata URL that points to the metadata document.
IDP Entity ID	Enter the IdP Entity ID or Issuer value that you got from Step 1.
Log On URL	Enter the SAML Login URL that you got from Step 1.
Log Out URL	Enter the SAML Logout URL(Premium feature) that you got from Step 1.
Certificate Fingerprint	Paste the X.509 Certificate copied from Step 1.
Login Attribute	NameID
Identifier Format	Select urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress from the dropdown list.
Authentication Context	Select urn:oasis:names:tc:SAML:2.0:ac:classes: PasswordProtectedTransport from the dropdown list.
Message Signing	Select the algorithm to use for signing Request messages sent to the IdP. For now select Not Signed.
Just In Time Provisioning	If checked then it automatically create a user account in your Canvas LMS if its the first time a user logs in with single sign-on (SSO).


• Click on Save.

3. Testing SSO for Canvas LMS

• Go to your Canvas LMS login page.
• Click on the login button you customized earlier. You’ll be redirected to the login page of the Shopify store.

• Enter your Shopify Store login credential and click on Login. You will be automatically logged in to your Canvas LMS account.

You have successfully configured Shopify as Identity Provider for your Canvas LMS application.