Shopify SAML Single Sign-On (SSO) Integration with Drupal as IdP

Drupal can be set as a centralized identity provider or an authentication source for the users across other applications via Single Sign-On (SSO). This document will walk you through the steps of integrating Drupal as SAML 2.0 IDP and Shopify as a Service Provider (SP) using the miniOrange SAML IDP module. This will allow you to manage users and their permissions in a place and at the same time the users can access multiple applications with single credentials. The module is compatible with Drupal 7, Drupal 8, Drupal 9, and Drupal 10.

Prerequisite:

• Install and activate the miniOrange Single Sign On-SSO application on your Shopify store.

Drupal SAML IdP Metadata:

• After installing the module on your Drupal site, in the Administration menu, navigate to Configuration → People → miniOrange SAML IDP Configuration. (/admin/config/people/miniorange_saml_idp/idp_setup)

• Under the IDP Metadata tab, click on the Download Metadata button. Open it on the notepad and copy the IdP information. Keep it handy. (This information is required to configure Shopify as SAML SP.)

Configure SAML SSO Application in Shopify Store:

• Go to your Shopify Store, click on the Apps tab, and select the miniOrange Single Sign On - SSO application.

• Click on the SETUP IDP from the left side.

• Under Configure SSO → Click on Add Identity Provider button.

• In the SAML tab, click on the Import IDP Metadata button.
• Click on Choose File button and upload the previously downloaded metadata file from Drupal.

• Enter the IdP name and select File radio button.

• Click on Import.
• Scroll to the bottom and click on the Save button.

• Click on Select → Metadata link against the app under the Configure SSO menu.

• From the Metadata tab, select the SP - INITIATED SSO and then click on Show Metadata Details button.
• Click on the Download Metadata button. (This is needed to configure Drupal as SAML IdP.)

Configuring Drupal as SAML Identity Provider (IdP):

• Navigate to the Drupal site. Go to the Service Provider Setup tab of the module and click on the Upload SP Metadata.
• In the Upload Metadata field, choose the SP metadata file that you downloaded from Shopify and click on the Upload button.

• Enable the checkbox for Assertion Signed and click on the Save Configuration.

You have successfully configured Shopify as SAML Service Provider and Drupal as SAML Identity Provider.

Test Connection between Shopify and Drupal:

• Navigate to Shopify store.
• Click on the Configure SSO tab from the left side.

• Click on the Select → Test Connection against the configured Identity Provider (DrupalSAML).

• Once the test configuration is successful, you will see the list of user attributes that are received from Drupal (IdP).