How to set up Single Sign-On (SSO) in Shopify with Facebook as IDP (OAuth)?

Overview

Shopify integration with Facebook allow your customers to login to the store using facebook as an identity provider. Here the Facebook works as an OAuth provider for Shopify SSO application using miniOrange as an Identity Broker. In this guide we will see how to implement Facebook Single Sign-On (SSO) solution on your Shopify store in the easiest way.

Our solution also supports advanced features such as user profile attribute mapping and role mapping, making it a breeze to manage user access. In this guide, we’ll walk you through how to configure Facebook SSO for user authentication in Shopify. By the end, your users will be able to log in securely and access your Shopify store with their Facebook credentials.

Want to explore more features of the Shopify Single Sign-On app? Click here to learn more.

Pre-requisites : Download And Installation

To Setup SSO into Shopify store using Facebook as IDP (OAuth), you will need to add Shopify Single Sign-On (SSO) application on your Store.

Configuration Steps

Step 1: Get Callback URL (Redirect URI) from Shopify

• Go to your Shopify store and navigate to the App section and click on Single Sign On - SSO login application.

• Click on the Add Identity Provider button to add your IDP.

• Select OAuth 2.0 protocol.

• Now choose Facebook from the list of IDPs.

• Copy the OAuth Callback URL and keep it handy as it will be used in further steps.

You have successfully obtained the Callback URL (Redirect URI) from Shopify.

Step 2: Setup Facebook as OAuth Provider

• To get started, Go to Facebook developers console click here and sign up/Login with your facebook developer account.

• Go to the Facebook Developers apps page and click the Create App button to add new app.

• Then choose the Allow people to log in with their Facebook account option as use case and then click Next.

• Enter the App Name and Add Contact Email for your Facebook app respectively then click on Create App button to save your settings.

• Go to App Settings -> Basic to view your App Id and App Secret. The App ID is your Client ID and the App Secret is your Client Secret, keep these values handy as you will need them later to configure the Shopify Single Sign-On SSO application (Refer to the images below).
• App Domain: Write your website’s domain there.
• Privacy Policy URL: Fill in this box with the URL liked to your website’s privacy policy page.
• Terms of Service: Fill in this box with the URL linked to your website’s terms of service page.
• User Data Deletion: From the drop down, select Data Deletion Instruction URL (Enter the URL of your page with the instructions on how users can delete their accounts on your site).
• Choose a Category from the dropdown in the Category field and pick the App Purpose option that describes your App the best, then press Save Changes to save your configurations.

• Now scroll down and click on Add Platform button. Select the Website option as you are trying to integrate your Facebook Login with a website. Click on Next.

• Next, enter your Shopify Store URL (store.xecurify.com) and click Save. Then, click Continue.

• Click on the Use cases tab on the left side and then click on the Customize button that appears next to the Authentication and account creation item.

• Below the Permissions section, find the email permission and click on the Add button.
• By default, your application only has Standard Access for the “public_profile” and “email” permissions, which means that only you can log in with it. To get Advanced Access you will need to go trough the Business Verification, that you can start on the Verification tab on the left side.

• Under the Facebook Login >> settings section click on Go to settings button to add the Redirect/Callback URL (from Step 1).

• Into the Valid OAuth redirect URIs field add the Redirect/Callback URL which you will get from the Shopify Single Sign-On (SSO) application. Click on Save changes button.

• Currently your app is in Development Mode which also means that people outside of your business can not use it. Once your verification is completed, click on the Go live tab and publish your app by clicking on the Go live button at the bottom right corner. Before you press it, it is recommended to check the steps listed on the “Go live” page, if you configured everything properly.

You have successfully configured Shopify as Service Provider into Facebook Application.

Step 3: Configure Facebook as IDP in Shopify

• Navigate back to the miniOrange Single Sign On-SSO application.

• Click on the Add Identity Provider button to add your IDP.

• Select OAuth 2.0 protocol.

• From the list of IDPs, select Facebook.

• Now, fill in the required details like Client ID, Client Secret, Endpoints, and Scope.
• Please refer to the below table for configuring the values.
• Note: You can find the cognito domain from Step 2.

• Now you can click on Save.

You have now completed the configuration for Facebook as IDP (OAuth) into your Shopify SSO Application.

Step 4: Test Connection

• After saving the IDP configuration, you will be redirected to the Test Connection step.
  Please perform Test Connection before mapping or fetching attributes, test connection ensures that your IDP configuration is correct.
• Click on the Test Connection button.

• On entering valid Facebook credentials you will see a pop-up window which is shown in the below screen.

• Click on the Fetch Attributes button to fetch the IDP attribute.

Step 5: Attribute Mapping

• Click on the + Attribute Mapping button to map attributes between Shopify and AWS Cognito.

• Map the attributes by referring to the table below:

Attribute Name in Shopify	Select the Shopify customer attribute key in which you want to sync incoming attribute value from IDP
Attribute Type	IDP Attribute
Attribute Value	Select the attribute key which you have fetched from your IDP and want to sync in Shopify

• Click on Next.

Step 6: Enable & Test SSO Configurations

In this Guide, you have configured AWS Cognito Single Sign-On (SSO) by configuring AWS Cognito as an OAuth Provider and Shopify as an OAuth Client using our Shopify Single Sign-On - SSO Login App. This solution ensures that you are ready to roll out secure access to your Shopify Store using AWS Cognito login credentials within minutes.

ADDITIONAL RESOURCES

• Shopify Security Solutions
• Shopify Single Sign-On (SSO)
• Shopify Content restriction
• Shopify Subscription

Get in Touch

Please reach out to us at shopifysupport@xecurify.com, and our team will assist you with setting up the Shopify SSO application. Our team will help you to select the best suitable solution/plan as per your requirement.