OAuth Single Sign-On (SSO) For Shopify Using WordPress as Identity Provider

Pre-requisite : Single Sign On - SSO Login Application

To configure SSO into Shopify with WordPress as IDP, you will need to install the miniOrange Shopify Single Sign On - SSO Login Application on your store

Shopify Single Sign-On (SSO)

By miniOrange

miniOrange Provides Secure Single Sign-On (SSO) access to your Shopify Stores(both plus and Non plus Stores).

Get this application

Step by Step guide for Single Sign-On in Shopify Store Using WordPress

1. Step to get the Redirect URI for OAuth Server

• Go to your Shopify store, click on the Apps tab and select the Single Sign On - SSO Login application.

• Click on the Setup IDP button in the top left in the navigation bar.

• From the left navigation bar select Configure SSO and click on Add Identity provider button.

• You can find the OAuth Callback URL/ Redirect URI in the OAuth 2.0 section. Keep the OAuth callback URL handy as you will need it later.

2. Setup WordPress as OAuth Provider

• Log into your WordPress instance as an admin
• Go to the WordPress Dashboard -> Plugins and click on Add New.
• Search for a WordPress OAuth Server Single Sign-On (SSO) plugin and click on Install Now.
• Once installed click on Activate.
• Now, go to the miniOrange OAuth Server plugin on the left side menu and choose your OAuth client from the list, Here WordPress.

• Enter the Client Name as per your choice. Enter Redirect URI/ OAuth Callback URI which is copied from Shopify store and click on the Save Client button.

• After saving the client in Wordpress OAuth Server Plugin, you will get the Client Id, Client Secret, Endpoints and Scopes. Keep these values handy as you will need them later.

• You have successfully completed your WordPress OAuth Server side configurations.

3. Configure WordPress as Identity Provider in Shopify.

• Again, go to your Shopify store, click on the Apps tab and select the Single Sign On - SSO Login application.

• Click on the Setup IDP button in the top left in the navigation bar.

• From the left navigation bar select Configure SSO and click on Add Identity provider button.

• Go to OAuth 2.0 tab and select the IDP name as a Custom Provider from the dropdown.

• Now, fill in the required details like Client ID, Client Secret, Endpoints, and Scope.
• Please refer to the below table for configuring the values.

App Name	Custom Provider
App Display Name	Display name of your choice
OAuth Authorize Endpoint	https://<your-site-url>/wp-json/moserver/authorize
OAuth Access Token Endpoint	https://<your-site-url>/wp-json/moserver/token
OAuth Get User Info Endpoint	https://<your-site-url>/wp-json/moserver/resource
Client ID	From step 2
Client secret	From step 2
Scope	profile openid

• Click on the Save button.

4. Testing SSO for your Shopify Store

• Go to your Shopify Store login page.(https://<your-shopify-storedomain>/account/login)
• Click on the login button you customized earlier.

• You’ll be redirected to the login page of the WordPress you configured in previous step. Log in with your WordPress account credentials.
• You’ll be successfully logged in to your Shopify store.

You have successfully configured Wordpress as Identity Provider for your Shopify Store.

Choose your preferred Identity Provider and start setting up SSO for Shopify right away

Additional Resources

• Shopify Security Solutions
• Shopify Single Sign-On (SSO)
• Shopify Two Factor Authentication
• Shopify Single Sign-On (SSO) using Azure B2C
• Shopify Secure Admin Login

If you are looking for anything which you cannot find, please drop us an email on shopifysupport@xecurify.com