Configure Shopify Microsoft Entra ID SCIM Provisioning & Deprovisioning

Overview

Shopify SCIM Provisioning and De-Provisioning application gives you the ability to automate user creation, updating, and disabling tasks in Shopify by directly interacting with Microsoft Entra ID. The System for Cross-domain Identity Management (SCIM) is an open standard for securely synchronizing user information between multiple applications. If your users use both Entra ID and Shopify, it's preferable to have all users updated in Shopify and even they can update their profile in Entra ID or admin can update the profile like updating their department and that can get synced directly with Shopify. miniOrange offers a solution that integrates SCIM-based user provisioning and de-provisioning into Shopify websites. Here we will go through a step-by-step guide to enable SCIM user sync between Shopify and Microsoft Entra ID.

Pre-requisites: Shopify SyncUP: Users and Course Sync application

miniOrange Shopify SyncUP: Users and Course Sync application allows you to sync user's creation, updation and disabling user from Microsoft Entra ID to your Shopify store. To configure user sync between Shopify Entra ID, you will need to install the Shopify SyncUP: Users and Course Sync application on your Shopify store.

Configuration Steps

Step by Step guide to Setup Microsoft Entra ID SCIM Provisioning and De-Provisioning with Shopify

Step 1: Enable SCIM provisioning and deprovisioning in Shopify

• Log in to Shopify. Navigate to App section and click on SyncUP: Users and Course Sync application.

• Navigate to the Integrations tab and click the Configure button to configure User Sync.

• Click on Azure to setup SCIM provisioning.

• Under the Configuration tab, enable New Customer Creation and SCIM Provisioning as shown in the below image.
• Scroll down and click on Save.

• Copy down the data in the Authorization Header as it will be used in later steps.

Step 2: Setup Provisioning and De-Provisioning in Microsoft Entra ID

• Sign in to the Microsoft Entra ID portal using your Microsoft identity platform administrator account.

1. Add an unlisted (non-gallery) application to your Microsoft Entra ID organization.

• Search for Enterprise Application.
• Select Enterprise Applications > New application.
• Select Create your own application.
• Under What are you looking to do with your application? choose to Integrate any other application you don't find in the gallery.

2. Configure Provisioning

• Open the created application.

• Select Provisioning to open the provisioning panel for editing.

• Change provisioning mode from manual to automatic.
• Enter the SCIM Base URL from step 1 into the Tenant URL.
• Similarly, enter the Bearer Token into the Secret Token field, which you noted earlier in step 1.
• Click on test connection.
• If test connection is successful save your configurations.

3. Provisioning Users

• Go to Assign users and group and assign the user you want to provision.

• If you already have some users then go or else create some users first then continue.

4. Start Provisioning

• Go to provisioning tab.
• Click on Start provisioning.
• If you want to provision your assigned user right now go for Provision on demand.

5. Provision on demand

• Search for the user you want to provision (user must be assigned to the app).
• Click on Provision.

Hence you have configured SCIM provisioning and de-provisioning between Microsoft Entra ID and Shopify.

Choose your preferred Identity Provider and start setting up SyncUP: Users & Course Sync for Shopify right away

Additional Resources

• Shopify Security Solutions
• Shopify Single Sign-On (SSO)
• Shopify Content restriction
• Shopify Subscription
• Convert Shopify Store into LMS platform

Get in Touch

Please reach out to us at shopifysupport@xecurify.com, and our team will assist you with setting up the Shopify SSO application. Our team will help you to select the best suitable solution/plan as per your requirement.