OTP Login for Shopify Plus Customer Accounts

miniOrange enables OTP-based passwordless login for Shopify stores running New Customer Accounts (NCA). On Shopify Plus, you can connect the miniOrange OTP Login app as a custom OpenID Connect (OIDC) identity provider, replacing Shopify's native email-code sign-in with a one-time code delivered over SMS or email.

This guide walks you through configuring the miniOrange app, registering it as an OIDC identity provider inside Shopify admin, testing the connection, and fine-tuning OTP delivery.

Pre-requisite: App Installation

• Log in to your Shopify Admin.
• Go to Apps → Shopify App Store
• Search for miniOrange OTP Login & Customer Accounts
• Click Install to add the app to your store
• Confirm your store has New Customer Accounts enabled under Settings → Customer accounts (this integration requires Shopify Plus)
• Open the app from Apps to start the OTP Login configuration

Step-by-Step Guide to Configure OTP Login for Shopify Plus Customer Accounts

Step 1: Copy OIDC Credentials from the App

• Open the Shopify OTP Login app's Home tab.
• Under Step 1 - OIDC credentials you'll find the values Shopify needs: the well-known / discovery endpoint, Client ID, Client secret, Additional scopes, and the Post-logout redirect URI parameter.
• Copy these values and keep them handy, as they will be used later in Step 4.

Step 2: Set Your OTP Behavior

• Scroll down and turn on Allow login with OTP to show the email/phone OTP screens.
• Turn on Allow OTP login for new users if first-time shoppers should get an account automatically after verifying.
• Choose a default country for the phone field so the country code is pre-filled, then click Save changes.

Step 3: Open Customer Accounts in Shopify Admin

• In a new tab, go to Shopify admin → Settings → Customer accounts. (or click here)
• Confirm Show sign-in links is on.
• Find the Authentication row and click Manage.

• On the Identity provider screen, click on the Connect to provider button in the top-right corner to add miniOrange OTP Login as a second sign-in option.

• Open the Provider dropdown and select Custom or other.

• Give it a recognizable Identity provider name - for example miniOrange OTP - so you can tell it apart from Shopify's default provider later on.

Step 4: Paste Your OIDC Values into Application Info

• Scroll down to Application info and paste in the values you copied in Step 1: the well-known / discovery endpoint URL, Client ID, Client secret and Additional scopes and Post-logout redirect URI parameter.

• Click Save. Shopify creates the provider - still marked Inactive - and shows a Setup complete banner.

• Back on the provider page, click Activate.

• The status badge switches to Active and an Identity provider activated toast confirms it - New Customer Accounts sign-in now runs through miniOrange OTP.

Step 5: Test Your Setup End-to-End

• Navigate back to the Application Dashboard and click on the Test Connection button.

• Provide your phone number and click on the Send OTP button to receive the one-time-password (OTP).

• Enter the 6-digit code -and after verifying the OTP, you will be redirected to the Shopify Customer Accounts page.

Step 6: What Shoppers See on Your Storefront

• Once the provider is active, the account icon in your storefront header sends customers straight into the miniOrange OTP flow instead of Shopify's native popup - there's nothing to edit in your theme.

• Clicking it opens the same phone/email OTP sign-in your test connection showed, live on the storefront.

Step 7: Configure OTP Delivery (SMS & Email)

• Steps 1–9 controlled how customers sign in. The app's Delivery Method tab controls how the OTP is delivered.
• On the SMS tab, turn on Enable OTP delivery over SMS, then keep Use default gateway for the fastest setup, or switch to Use your custom gateway to route codes through your own SMS provider, gateway URL and authentication.

• On the Email tab, stick with the default email template, or switch to Use your custom email template to set your own From address, subject and body. Keep ##otp## in the body wherever the generated code should appear.

Step 8 (Optional): Disable reCAPTCHA for Any Classic Accounts Surface

• Password-protected staging stores and any surface still using classic accounts can block miniOrange's OTP screen behind Shopify's own CAPTCHA.
• Go to Settings → Preferences, scroll to Spam protection, and uncheck Enable Google reCAPTCHA on login, create account and password recovery pages.

You have successfully configured OTP Login for Shopify Plus New Customer Accounts by connecting the miniOrange OTP Login app as a custom OIDC identity provider. Customers signing in through your storefront, checkout, or order status page will now verify with a one-time code instead of Shopify's native email popup.