SSO into Shopify using WordPress as IDP (SAML) | Shopify WordPress SSO

Overview

Shopify integration with WordPress allow your customers to login to the store using WordPress as an identity provider (SAML). Here the WordPress works as an SAML provider for Shopify SSO application using miniOrange as an Identity Broker. In this guide we will see how to implement WordPress Single Sign-On (SSO) solution on your Shopify store in the easiest way.

Our solution also supports advanced features such as user profile attribute mapping and role mapping, making it a breeze to manage user access. In this guide, we’ll walk you through how to configure WordPress (SAMl) SSO for user authentication in Shopify. By the end, your users will be able to log in securely and access your Shopify store with their WordPress credentials.

Want to explore more features of the Shopify Single Sign-On app? Click here to learn more.

Pre-requisites : Download And Installation

• To Setup SSO into Shopify store using WordPress as IDP (SAML), you will need to add Shopify Single Sign-On (SSO) application on your Store.

Configuration Steps

Step 1: Configure Shopify as a Service Provider (SP) in WordPress

• Log into your WordPress Instance as an admin.
• Install and activate the SAML & WSFED IDP ( SSO using WordPress Users ) plugin on your WordPress site which will be acting as an Identity Provider.
• Once installed, click on Activate.
• To configure Shopify as a Service Provider, we need the important endpoints such as SP Entity ID, ACS URL, X.509 certificate from the Shopify SSO application.
• Open your Shopify store and navigate to the App section and click on Single Sign On - SSO login application.

• Click on the Add Identity Provider button to add your IDP.

• Select SAML protocol.

• From the list of identity providers (IDPs), select WordPress as your identity provider.

• Click on the Get Metadata button to get the service provider (Shopify) metadata.

• For SP-Initiated SSO, note down the required details to configure SSO in WordPress.

• Enter the values corresponding to the information from the Service Provider. Refer to the table below.

Service Provider Name	Name of your Service Provider.
SP Entity ID or Issuer	Copy and paste the SP-EntityID from the Service Provider
ACS URL	Copy and paste the ACS URL from the Service Provider.
NameID Format	urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
Assertion Signed	Checked

• Click on the Save button to save your configurations.
• Go to the IDP Metadata tab. Here you can find information for configuring the Service Provider.
• Copy the Metadata URL which we will further require to configure WordPress as IDP in Shopify.

You have completed your WordPress side configurations for SSO into Shopify using WordPress as SAML IDP.

Step 2: Configure WordPress as an Identity Provider (IDP) in Shopify

• Navigate back to the Shopify Single Sign On-SSO application and click on the Import IDP Metadata button.

• Select the upload method as Metadata Link. Paste the copied XML file link from Step 1 and Click on Import.

• Add the appropriate IDP Name and click on Save.

You have now completed the configuration for WordPress SAML IDP into your Shopify SSO Application.

Step 3: Test Connection

• After saving the WordPress SAML IDP configuration, you will be redirected to the Test Connection step. Perform a test connection before mapping or fetching attributes, a test connection ensures that your IDP configuration is correct.
• Click on the Test Connection button.

• On entering valid WordPress IDP credentials you will see a pop-up window which is shown in screen below.

• Click on the Fetch Attributes to fetch the IDP attribute.

Step 4: Attribute Mapping

• Click on the + Attribute Mapping button to map attributes between Shopify and WordPress SAML IDP.

• Map the attributes by referring the table below:

Attribute Name in Shopify	Choose the attribute from the list of predefined attributes
Attribute Type	IDP Attribute
Attribute Value	Select the attribute value you have fetched from your IDP

• Click on Save.
• Navigate to the application home page. Click More actions against the configured IDP, and click on Make Default to set your IDP as default.

Step 5: Testing SSO for your Shopify Store

• Go to your Shopify Store login page. (https://<your-shopify-storedomain>/account/login)
• Click on the login button you customized earlier.

• You’ll be redirected to the WordPress login page that you configured in the previous step. Log in with your WordPress SAML IDP account credentials.
• You’ll be successfully logged in to your Shopify store.

Hence you have configured Shopify Single Sign-On (SSO) using Wordpress as SAMl IDP and Shopify as a Service Provider. using the Shopify Single Sign-On (SSO) login application. This solution ensures that you are ready to roll out secure access to your Shopify store using Wordpress login credentials within minutes.

Additional Resources

• Shopify Security Solutions
• Shopify Single Sign-On (SSO)
• Shopify Content Restriction
• Shopify Order and SMS Notifications
• Two Factor Authentication (2FA) for Shopify

Get in Touch

Please reach out to us at shopifysupport@xecurify.com, and our team will assist you with setting up the Shopify Inventory Sync application. Our team will help you to select the best suitable solution/plan as per your requirement.