Shopify – Okta SCIM Provisioning And Deprovisioning

Overview

Shopify SCIM Provisioning and De-Provisioning application gives you the ability to automate user creation, updating, and disabling tasks in Shopify by directly interacting with the Okta dashboard. The System for Cross-domain Identity Management (SCIM) is an open standard for securely synchronizing user information between multiple applications. If your users use both Okta and Shopify, it's preferable to have all users updated in Shopify and even they can update their profile in Okta or OKTA admin can update the profile like updating their department and that can get synced directly with Shopify. miniOrange offers a solution that integrates SCIM-based user provisioning and de-provisioning into Shopify websites. Here we will go through a step-by-step guide to enable SCIM user sync between Shopify and OKTA.

Pre-requisites: Application Installation

• Log in to your Shopify Admin.
• Go to Apps → Shopify App Store
• Search for miniOrange Single Sign-On – SSO
• Click Install to add the app to your store
• Open the app from Apps to start Shopify Okta SCIM Provisioning And Deprovisioning SSO configuration

Step by Step Guide to Configure Shopify Okta SCIM Provisioning And Deprovisioning as IDP for SSO into Shopify

Step 1: Enable SCIM provisioning and deprovisioning in Shopify

• Log in to Shopify. Navigate to App section and click on SyncUP: Users and Course Sync application.

• Navigate to the Integrations tab and click the Configure button to configure User Sync.

• Click on Okta to setup SCIM provisioning.

• Under the Configuration tab, enable New Customer Creation and SCIM Provisioning as shown in the below image.
• Scroll down and click on Save.

• Copy down the data in the Authorization Header as it will be used in later steps.

Step 2: Setup Provisioning and De-Provisioning in Okta

• Login to Okta Developer console.
• Please set up multi-factor authentication in Okta for added security. If it's already configured, enter the passcode from the Okta Verify mobile app.
• Click on Verify.

• Navigate to Applications >> Application .

• Choose the SAML application for which you want to enable SCIM provisioning.

• Navigate to General tab to enable SCIM provisioning in Okta as shown below.

• Click on Save.
• Navigate to the Provisioning tab. Paste the following data from the table and check the tabs as shown in the image.

SCIM connector base URL	From Step 2
Unique identifier field for users	email
Authentication Mode	HTTP Header
Authorization Header	From Step 2

• Click on Save.
• Select To App in the left panel, then select the Provisioning Features you want to enable by clicking on Edit.

• Click on Save.
• Navigate to Assignment >> Assign and select Assign to People.

• Select the People you want to assign and click on Done.

• You can verify that the assigned customer is synced in the Customers section in Shopify.

Hence you have successfully configured SCIM provisioning and de-provisioning between Okta and Shopify.