Provide Username/Password or Email OTP Login along with SSO via any IDPs for Shopify Plus Customer Accounts

Overview

Merchants can let customers log in using username and password or Email OTP, while also supporting SSO via enterprise identity providers (IdPs) like Okta, Azure AD, and AWS Cognito using our Shopify Single Sign-On (SSO) Application. This ensures a flexible and secure authentication experience, allowing customers to choose their preferred login method while enabling merchants to connect seamlessly with enterprise identity platforms.

Pre-requisites: Single Sign-On (SSO) Login Application

To enable SSO login for your Shopify Plus store (Customer Accounts), you need:

• A Shopify Plus store with Customer Accounts activated.
• The miniOrange Shopify Single Sign-On (SSO) Login Application should be installed on your store.

Configuration Steps

Step-by-step guide to set up username/password or email OTP as login methods, with the option to configure SSO for Shopify Plus customer accounts using any identity provider (IdP).

Step 1: Get Storefront Access Token from Shopify

• Navigate to Settings in Shopify Admin.

• Now navigate to Apps and sales channels and click on Develop apps button.

• Click on Create an app button.

• Provide a name for your app and click on Create app button.

• Click on the Configure Storefront API scopes button.

• Check all the fields under Customers section and click on Save as shown in below image.

• Click on Install app button.

• Copy the Storefront API access token and keep it handy as it will be used in the next step.

Step 2: Configure the login screen in Single Sign-On (SSO) application

• Go to your Shopify store and navigate to the App section and click on Single Sign On - SSO login application.

• Click on the B2B tab in the left navigation menu.

• Click on the Setup button in the Setup B2B section.

• Now paste the Storefront Access Token value copied in the previous step. Click on Next.

• You will be redirected to the B2B Settings page. Configure the login screen as per your requirements.
• You can choose from multiple login options (User Sign-Up, Email OTP Login, and Phone OTP Login) to add to your Shopify B2B store’s login page.

• Enable User SignUp
• Enable Email OTP Login
• Enable Phone OTP Login

Enable User Signup

• Activate the Enable User Signup option under the Login Options for B2B tab to allow new users to register. This setting lets you collect additional user information during signup, along with the email and password login.
• Click on Save.

Enable Email OTP Login

• Activate the Enable Email OTP Login option under the Login Options for B2B tab to let users log in using their email and a one-time password (OTP). This feature can be used in addition to the standard email and password login method for B2B users.
• Click on Save.

Enable Phone OTP Login

• Activate the Enable Phone OTP Login option under the Login Options for B2B tab to let users log in using their Phone number and a one-time password (OTP). This feature can be used in addition to the standard email and password login method for B2B users.
• Click on Save.

• The end user will see all the login options enabled above on the Shopify B2B Store login screen.

Step 3: Restrict Access to Non-Logged-In Users

• Activate the Restrict Access to Non-Logged-In Users option under the B2B Restriction Settings tab to ensure that only logged-in B2B users can access store content. Non-logged-in users will be blocked from viewing the store, except for whitelisted pages.
• Click on Save.

• If you want to whitelist a page so that any user can view or access it, click the + Add Pages button under the Whitelisted Pages section.

• Select the pages you want to whitelist, then click Done to save your selection.

• Click on Save.

• To complete the configuration, enable the extension by clicking on B2B Restrict Store Access.

• Enable the B2B Restrict Access extension and click Save to apply the settings.

• Navigate back to the App Dashboard and click the Next button as shown in the image below.

Step 4: Customer Accounts Setup

• Scroll down and copy these values and click the Settings button as shown to connect the store with the app.

• Click on the Manage Providers button.

• Click on Connect Provider button.

• Provide an Identity provider name and select Provider as Custom or other if you dont have any IDP listed there.

• Scroll down to Application info section and paste the values copied from the above step. Click on Save.

• Click on Activate button.

• Navigate back to the App and Click on the Test Connection button.

• Click on the Sign up link to create a account for testing.

• Fill out the fields and click on the Sign up button to create a account.

• Provide the One Time Password (OTP) received over Email and click on Verify to complete the Test Connection.

• You will see the Test connection successful window. Click on Close Window.

Step 5: Add SSO via IDP button on the Login Screen

• To add the Login with your IDP button to your login screen, you need to configure your IdP in the SSO application Click here to view all supported identity providers and follow their setup guides. Once the configuration is complete, an SSO with your IdP button will automatically appear on the login screen. If the button does not appear, please contact us for support.

By completing these steps, you can offer customers a seamless and secure login experience with username/password, email OTP, or enterprise SSO — all from a single, branded login screen. If you face any issues or need help with customisation, our team is here to assist you.

ADDITIONAL RESOURCES

• Shopify Security Solutions
• Shopify Single Sign-On (SSO)
• Shopify Content restriction
• Shopify Subscription
• Shopify – Okta SCIM Provisioning And Deprovisioning

Get in Touch

Please reach out to us at shopifysupport@xecurify.com, and our team will assist you with setting up the Shopify SSO application. Our team will help you to select the best suitable solution/plan as per your requirement.