Salesforce Single Sign-On (SSO) using Shopify Store as Identity Provider

Pre-requisite : Store as IDP - SSO Login Application

To configure SSO into Salesforce CRM with Shopify as IDP, you will need to install the miniOrange Store as IDP- SSO Login Application on your store

Follow the Step-by-Step Guide given below for configuring SSO into Salesforce CRM using Shopify Store as IDP

1. Configure Shopify store as IdP (Identity Provider)

• Go to your shopify store, click on Apps tab and select Store as IDP-SSO login application.

• From the left navigation bar select Apps and click on Add Application button.

• Go to SAML tab and search for Salesforce and select Salesforce.

• In the Add Application Section, enter the values by refering the below table.


Custom Application Name	Choose appropriate App name
SP Entity ID or Issuer	https://[yourdomain].my.salesforce.com/
ACS URL	https://[yourdomain].my.salesforce.com/?so=[organization_id]
Single Logout URL	https://[yourdomain].my.salesforce.com
Name ID	E-Mail Address
Name ID Format	urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress

• Now, in the Attribute Mapping section, click on + sign to add attributes and enter the attribute names with their values as shown below.

  (Follow the steps given here to find out Salesforce profileId.)


• In the Add Policy Section, enter the values by refering the below table.


Group Name	DEFAULT
Policy Name	Salesforce
Login Method	Password

• Click on the Save button to save your configuration.
• Now navigate to Select option and choose Metadata tab.

• Now click on Show Metadata Details under INFORMATION REQUIRED TO AUTHENTICATE VIA EXTERNAL IDPS section. Copy down these data as they will be used in furthur steps.

You have successfully completed Shopify side configurations.

2. Configure Salesforce CRM as Service Provider

• Open a new browser tab or window, Log in to your Salesforce Account.
• Select either Salesforce Classic: Navigate to Setup > Security Controls > Single Sign-On Settings.

• Or Salesforce Lightening Experience: Click the gear icon, then navigate to Setup > Identity > Single Sign-On Settings.

• On the Single Sign-On Settings page, click on Edit.

• Check the SAML Enabled box to enable the use of SAML Single-Sign On, then click on Save.

• Click New to open SAML Single Sign-On Settings.

• Configure the following details as given below:

Name	Enter a name of your choice.
SAML Version	Make sure this is set to 2.0. This should be enabled by default.
Entity ID or Issuer	From Step 1
Identity Provider Certificate	From Step 1
Identity Provider Login URL	From Step 1
Custom Logout URL	From Step 1

• Click on Save.

• Copy your Login URL value.

You have successfully completed Salesforce CMS side configurations.

3. Testing SSO for Salesforce CRM

• You can use the login URL from the last step.
• Click on the login button you customized earlier. You’ll be redirected to the login page of the Shopify store.

• Enter your Shopify Store login credential and click on Login. You will be automatically logged in to your Salesforce CRM account.

You have successfully configured Shopify as Identity Provider for your Salesforce CRM application.