How to Set Up Drupal SAML SSO With Shopify

Drupal SSO with Shopify lets users log in to a Drupal site using their Shopify account. In this configuration, Shopify acts as the SAML identity provider (IdP), while Drupal acts as the service provider (SP). To establish the connection, you will configure the miniOrange SAML Service Provider module on Drupal and the MO: SSO login to LMS, CRM, CMS app on Shopify. The integration exchanges service provider metadata, configures the required SAML authentication settings, and allows users to authenticate to Drupal through Shopify.

Install Application

Pricing Plans

Prerequisite: MO: SSO login to LMS, CRM, CMS

To configure Drupal SAML SSO with Shopify, install the miniOrange MO: SSO login to LMS, CRM, CMS app on your Shopify store. The app allows Shopify to act as the identity provider (IdP), enabling users to access your Drupal site using their Shopify account.
Follow these steps to install the app:

Log in to your Shopify Admin.
Go to Apps → Shopify App Store.
Search for MO: SSO login to LMS, CRM, CMS by miniOrange.
Click Get this application to add the app to your store.
Open the app from Apps to begin configuring Drupal SAML SSO.

Step-by-Step Guide to Configure Drupal SAML SSO With Shopify

Step 1: Get metadata from the Drupal site Service Provider

Login in your Drupal site’s admin console and click on Extend from the top navigation bar..
Select the Install new module option to install a new module on your Drupal site.

Shopify-drupal-sso - Drupal OAuth Client Install Module

Upload the downloaded zip file of the Module and click on the Install button to continue.

Shopify-drupal-sso - Drupal OAuth Client Select Zip-File

Select Enable newly added modules.

Scroll down till you find miniOrange SAML Service Provider. Click on the checkbox next to it and click on the Install button to enable the module.

Click on Configuration from the top navigation bar and Select miniOrange SAML Login Configuration.

Shopify-drupal-sso - configuration-drupal

In the miniOrange SAML Service Provider module, navigate to Service Provider Metadata tab. Here, you can find the SP metadata such as SP Entity ID / Issuer, SP ACS URL (AssertionConsumerService) and X.509 Certificate which are required to configure the Identity Provider (Shopify Store). Copy it and keep it handy.

Shopify-drupal-sso - miniorange-saml-service-provider-metadata-drupal-manual-enter

Step 2: Configure Shopify store as Identity Provider

Now go to your shopify store, click on Apps tab and select SSO login to LMS, CRM, CMS application.

Shopify-drupal-sso - add-store-as-idp-application-shopify

From the left navigation bar select Apps and click on Add Application button.

Go to SAML tab and search for drupal and select Drupal (SAML).

Shopify-drupal-sso - drupal-sso-using-shopify-as-idp-search-for-drupal-sp-1

Enter the values corresponding to the information from Drupal site. Refer to the table below.

Service Provider Name	Name of your Service Provider.
SP Entity ID or Issuer	SP-Entity ID from Step 1
ACS URL	ACS URL from Step 1
NameID Format	urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
Assertion Signed	Checked

Click on the Save button to save your configuration.
Now navigate to Select option and choose Metadata tab.

Shopify-drupal-sso - drupal-sso-using-shopify-as-idp-idp-metadata-1

Now click on Show Metadata Details under INFORMATION REQUIRED TO AUTHENTICATE VIA EXTERNAL IDPS section. Click on Download Metadata or copy down these data as they will be used in furthur steps.

You have successfully completed Shopify side configuration.

Step 3: Configure Drupal site as Service Provider

In the miniOrage SAML Service Provider module, go to Service Provider Setup tab of the module. There are two way to configure Drupal SAML Service Provider SSO module:

A. By Uploading IDP Metadata

Click on Upload IDP Metadata link.
Click on Upload Metadata File >> Choose File and Select the downloaded file from Step 2. Click on Upload File to fetch your information.

B. Manual Configuration

Provide the required data (i.e. Identity Provider Name, Idp Entity ID or Issuer, SAML Login URL, SAML Logout URL and X.509 Certificate ) from your Identity Provider (Shopify store) and click on Save Configuration button to save your configuration.

Identity Provider Name	Enter name of Identity Provider
Idp Entity ID or Issuer	Copy Idp Entity ID / Issuer from Step 2 and paste it.
SAML Login URL	Copy Single Sign On URL from Step 2 and paste it.
SAML Logout URL	Copy Single Sign out URL from Step 2 and paste it.
X.509 Certificate	Copy and Download Signing certificate from Step 2 and paste it.

Shopify-drupal-sso - drupal-manual-configuration

You have successfully completed Drupal side configuration.

Step 4: Testing SSO for Drupal site

Go to your Drupal site login page.
Click on the login button . You’ll be redirected to the login page of the Shopify store.

Enter your Shopify Store login credential and click on Login. You will be automatically logged in to your Drupal site.

You have successfully configured Shopify as Identity Provider for your Drupal site.

Frequently Asked Questions

Which Drupal versions does the SAML module support?

The miniOrange SAML Service Provider module supports multiple Drupal versions. The current 3.2.0 release supports Drupal 9.3 and later, Drupal 10, and Drupal 11. Drupal 7 and Drupal 8 require compatible older release branches. Check the Drupal.org release page to identify the appropriate version for your Drupal installation.

Can I map Shopify customer details and roles to Drupal users?

The miniOrange Drupal SAML Service Provider module supports mapping SAML attributes to Drupal user fields and assigning Drupal roles based on attribute values. The available mappings depend on the attributes included in the SAML response from Shopify and the features available in your module edition. Verify that the required customer details and role attributes are present in the SAML response before configuring the mappings.

Is the Drupal SAML module free?

The miniOrange SAML Service Provider module is available through Drupal.org. Some advanced capabilities are available only in upgraded versions of the module. Review the available features and applicable licensing requirements to confirm that the version you select supports your SSO configuration needs.

What happens to users who already have a Drupal account?

Existing Drupal accounts are not automatically deleted when you configure SAML SSO. Whether a user authenticating through Shopify is matched to an existing Drupal account or a new account is created depends on the module's account-matching and user-creation settings.

Configure the SAML user identifier and attribute mappings to match your Drupal account structure. Test the login process with an existing test account before enabling SSO for all users to avoid unintended account duplication or access issues.

Why does Drupal SSO fail after I log in on Shopify?

Successful authentication on Shopify does not necessarily mean that Drupal has accepted the SAML response. Incorrect metadata, mismatched user identifiers, or certificate configuration issues can prevent the Drupal login from completing.

Check the following configuration details:

Service provider metadata: Confirm that the SP Entity ID or Issuer and Assertion Consumer Service (ACS) URL configured in Shopify match the values provided by Drupal.
Identity provider settings: Verify that the IdP Entity ID, SAML login URL, logout URL, and X.509 signing certificate configured in Drupal match the metadata provided by Shopify.
NameID format: Confirm that the SAML response contains the expected user identifier. This guide uses the email address as the NameID format.
SAML assertion signing: Verify that the assertion-signing configuration matches the settings required by the integration.
User and attribute mapping: Check that the returned SAML attributes match the Drupal fields and user identifiers configured for the login.

If the problem persists, review the Drupal and miniOrange SAML module logs, compare the received SAML attributes with the configured mappings, and verify that the metadata and certificate values are current.

Thank you for your response. We will get back to you soon.

Something went wrong. Please submit your query again

Contents