Provide Username/Password or Email OTP Login along with SSO via any IDPs for Shopify Plus Customer Accounts

Merchants can let customers log in using username and password or Email OTP, while also supporting SSO via enterprise identity providers (IdPs) like Okta, Azure AD, and AWS Cognito using our MO: Customer Accounts Login application. This ensures a flexible and secure authentication experience, allowing customers to choose their preferred login method while enabling merchants to connect seamlessly with enterprise identity platforms.

Pre-requisites: App Installation

• Log in to your Shopify Admin.
• Go to Apps → Shopify App Store.
• Search for Customer Accounts Login.
• Install the MO: Customer Accounts Login application to your store.
• Open the app from the Apps section in the left navigation menu to start the configuration.
• The store must be a Shopify Plus store with Customer Accounts activated.

Step-by-step guide to set up username/password or email OTP Login on Shopify Plus Store

Step 1: Configure the login screen in Customer Accounts Login application

• Go to your Shopify store and navigate to the Apps section and click on MO: Customer Accounts Login.

• On the app dashboard, scroll down and locate the Storefront Login Options card and click Edit.
• You will land on the Login Options page. Open the Storefront Login Settings tab.

• On this page, turn on the login methods you want on the storefront. You can enable more than one at the same time. The change is saved automatically.
• Choose from Enable User Signup, Enable Email OTP Login, Enable Email & Password Login, Enable Phone OTP Login, and Disable Email OTP Verification for User Signup (reCAPTCHA).

• Enable User SignUp
• Email OTP Login
• Email Password Login
• Phone OTP Login
• reCaptcha Login

Enable User Signup

• Scroll to New User Signup and turn on Enable User Signup so new customers can register.
• The setting is saved automatically.

Enable Email OTP Login

• Turn on Enable Email OTP Login under Storefront Login Settings so customers can sign in with their email and a one-time password (OTP).
• The setting is saved automatically.

Enable Email Password Login

• Turn on Enable Email & Password Login under Storefront Login Settings so customers can sign in with their email and password.
• The setting is saved automatically.

Enable Phone OTP Login

• Turn on Enable Phone OTP Login under Storefront Login Settings so customers can sign in with their phone number and a one-time password (OTP).
• The setting is saved automatically.

reCaptcha Login

• Under New User Signup, turn on Disable Email OTP Verification for User Signup to replace email OTP verification with a reCAPTCHA challenge during signup.
• The setting is saved automatically.



• When that option is on, the customer sees a reCAPTCHA challenge during signup instead of Email OTP verification.

Enable and customize the login extension

• After you turn on a login option (Email & Password, Email OTP or Phone OTP), click the b2b login extension link shown below that toggle. This opens the theme editor with the login page settings.

• In the App embeds panel, turn on B2B Login Page Layout and click Save to enable the login extension on your store. The storefront login screen only shows the enabled login options once this embed is on.
• From the page list, select Login Page to customize it.

• In the settings panel, you can edit the Title, Subheading and their alignment, choose the Default Login Option (Email/Password or OTP) and the Layout Order, and change the text of the Sign In, Send OTP and Verify OTP buttons.

• Under Logo Image, upload your logo. It replaces the default icon on the login form.
• You can also set the Page Background Image, container background, text, button and link colors, adjust the card's border radius, width and padding, show or hide the theme header and footer, or add your own code under Custom Liquid.

• Go back to the Login Options page and click the b2b reset password extension link to enable it, so customers can reset their password from the login page.

• In the App embeds panel, turn on B2B Reset Password Layout and click Save.
• You can edit the Title, Subheading, alignment, and the Send Reset Link and Reset Password button text, as shown in the image.

Step 2: Customize the Company Registration Form

• If customers can register their own company, you can choose which details they fill in on the company registration form. Company registration must be turned on under Company Management → Configuration → Allow end users to register their Company. Click here for the full company onboarding setup.
• In MO Customer Accounts Login, click Registration form design in the left navigation. This screen shows the fields currently on the company registration form.

• Click a field on the left to add it to the form. Fields are grouped under Profile, Address, and Custom.
• Add predefined fields such as company name, contact name, email, phone, email domain, billing address, or shipping address.
• Add your own custom fields, such as Tax ID, to collect any other details you need before approving a company.
• Click Save.

• The saved fields appear on the storefront when a customer opens Company Create Request and clicks Create Company.

Step 3: Allow Alternate Login for SSO Users

• On Login Options → Storefront Login Settings, turn on Allow Alternate Login for SSO Users. Customers who have already signed in through SSO can then also use email OTP, phone OTP, or email and password.

• Once enabled, customers can sign in using email/phone OTP, email and password, or SSO. If this option is off, SSO users can only log in using SSO.

Step 4: Customer Accounts Setup

• In the left navigation, click Connect Store.
• Copy the Well-known or discovery endpoint URL, Client ID, and Client secret.
• Click the Customer accounts link to open Shopify customer account settings.

• In the Authentication row, click Manage.

• Click Manage providers.

• Click Connect to provider.

• Set Provider to Custom or other if your identity provider is not listed, and enter an Identity provider name.

• In Application info, paste the discovery endpoint, Client ID, and Client secret copied in the step above. Click Save.

• Click Activate.

• The provider is listed with an Active status. Do not deactivate a provider that is already in use.

• Go back to Connect Store in the app and click Test Connection.

• On the login screen, click Sign up to create an account for the test.

• Enter the email and password, then click Create Account.

• Enter the one-time password sent by email and click Verify OTP. After the code is verified, close the test window.

Step 5: Restrict Access to Non-Logged-In Users

• Go to Login Options and open the Store Access Control Settings tab.
• Turn on Restrict access to Non-B2B users so only customers assigned to a company can view store content. Everyone else is blocked, except pages you whitelist.
• Turn on Enable Auto Login Redirection if customers who open a restricted page should be sent to the login page.
• Click Save.

• Under Whitelisted pages, click Add Pages, select the pages any visitor may open, then save the selection.

Step 6: Restrict login and signup based on email domain

• Stay on the Store Access Control Settings tab.
• Click Enable next to Restrict login and signup based on email domain to control which email domains can log in or sign up.

• Select Allow only these domains to allow sign-in and signup only for the domains you list.
• Select Block these domains to block those domains and allow every other domain.

• Click Save.

• Enter the email domains you want to allow or block under Added email domains.

• Enter an email address from another domain and click Verify to check whether that domain can sign in.

• If the domain is not allowed, a disclaimer message is shown and the customer cannot sign in.

Step 7: Add SSO via IDP button on the Login Screen

• To add the Login with your IDP button to your login screen, configure your IdP in the SSO application. Click here to view all supported identity providers and follow their setup guides. Once the configuration is complete, an SSO button for your IdP appears on the login screen. If the button does not appear, contact us.

By completing these steps, you can offer customers a seamless and secure login experience in Shopify Plus with username/password, phone OTP, or enterprise SSO - all from a single, branded login screen.