Search Results :

×

Contents

Setup Single Sign-On (SSO) into the Shopify Store using IdentityServer4 as an Identity Provider

Configure Single Sign On (SSO) login into the Shopify store using IdentityServer4 as an Identity provider (IDP). miniOrange allows IdentityServer4 to act as an IDP (Identity Provider), which allows users to Single Sign-On (SSO) into the Shopify store using IdentityServer4 credentials. This document will guide you through the easy step-by-step process of configuring SSO login into the Shopify store with IdentityServer4 using OAuth protocol. This solution ensures that you are ready to roll out secure access to your Shopify store using IdentityServer4 within minutes.

About IdentityServer4: IdentityServer4 is based on open source platform like IdentityServer, which helps companies using .NET to make and provision identity and access solutions for the latest applications, including Single Sign-On (SSO), Identity Management, etc. All solutions by IdentityServer4 are flexible as per the requirements and support standard SSO protocols (SAML, OAuth, etc).

Pre-requisite: Shopify Single Sign-On (SSO) Application

To configure SSO into the Shopify with IdentityServer4 as IDP, you will need to install the miniOrange Shopify Single Sign On - SSO Login Application on your store.

Shopify Single Sign-On (SSO)

By miniOrange

miniOrange Provides Secure Single Sign-On (SSO) access to your Shopify stores (both Plus and non-plus Stores).

Get this application

Step by Step guide for Single Sign-On (SSO) in Shopify Store Using IdentityServer4

1. Step to get the Redirect URI for the OAuth Server

Go to your Shopify store, click on the Apps tab, and select the Single Sign On - SSO Login application.

shopify app section - single sign on application

Click on the Setup IDP button in the top left of the navigation bar.

Single Sign-On (SSO)for Shopify (Plus and Non Plus), Configure IDP for enabling Single Sign-On (SSO)

From the left navigation bar select Configure SSO and click on Add Identity provider button.

Shopify Single Sign-On (SSO) - Configure SSO

You can find the OAuth Callback URL/ Redirect URI in the OAuth 2.0 section. Keep the OAuth callback URL handy as you will need it later.

Shopify Single Sign-On (SSO) - Redirect URI

2. Configure Shopify as SP in IdentityServer4 Identity Provider

Set up IdentityServer4 using the guidelines provided here. here
Enter Redirect URI/ OAuth Callback URI which is copied from the Shopify store.
Copy your Client ID and Client Secret and keep these values handy as you will need them later.
You have completed your IdentityServer4 OAuth server-side configurations.

3. Configure IdentityServer4 as an Identity Provider in Shopify

Again, go to your Shopify store, click on the Apps tab, and select the Single Sign On - SSO Login application.

Click on the Setup IDP button in the top left of the navigation bar.

From the left navigation bar select Configure SSO and click on the Add Identity provider button.

Shopify Single Sign-On (SSO) - miniorange sso application - Add Identity Provider (IDP) Configure SSO

Go to the OAuth 2.0 tab and select the IDP name as a Custom Provider from the dropdown.

Shopify - miniorange sso application - choose OAuth 2.0

Now, fill in the required details like Client ID, Client Secret, Endpoints, and Scope.
Please refer to the below table for configuring the values.

App Name	Custom Provider
App Display Name	IdentityServer4
Authorization Endpoint	https://<domain-name>/connect/authorize
Access Token Endpoint	https://<domain-name>/connect/token
Userinfo Endpoint	https://<domain-name>/connect/userinfo
Scope	profile openid email

Click on the Save button.

Shopify Single Sign-On (SSO) - miniorange sso application - Click on Save

You have completed your Shopify side configurations.

4. Test Connection

Go to the Configure SSO tab.
Click on the Select >> Test Connection option against the Identity Provider you configured.

IdentityServer4 Single Sign On SSO test connection

On entering valid IdentityServer4 credentials you will see a pop-up window which is shown in the below screen.

IdentityServer4 Single Sign On SSO SucessTestConnection

Hence you have successfully configured SSO between Shopify and IdentityServer4.

5. Testing SSO for your Shopify Store

Go to your Shopify Store login page.(https://<your-shopify-storedomain>/account/login)
Click on the login button you customized earlier.

Shopify Single Sign-On (SSO) - Select Project IdentityServer4 OAuth Provider for Shopify SSO

If you encounter an "invalid or missing reCAPTCHA token" error accompanied by a "Something went wrong" message, refer to this FAQ to resolve the error.

Shopify IdentityServer4 SSO - Something went wrong error

Else, you’ll be redirected to the login page of the IDP you configured in previous step. Log in with your IDP account credentials.
You’ll be successfully logged in to your Shopify store.

You have successfully configured IdentityServer4 as an Identity Provider (IDP) for your Shopify Store.

Troubleshooting

invalid_request

This may be because your primary domain would be different from your Shopify domain. To check your primary domain and make SSO work, follow the steps given here.

shopify_plan_expired

This issue arises when either the trial period of your Development plan is expired. Or if your plan is not auto-renewed from the Shopify end. Contact us at shopifysupport@xecurify.com to resolve the plan upgrade issue and get smooth functioning of the SSO – Single Sign On Application.

invalid_attributes_received

As email is a required entity in Shopify for account creation as well as login operation, Single Sign On is not successful in this case. To resolve this error, please follow given here.

encountered_an_error

When I am performing SSO, I am getting ‘Please verify if Shopify App is installed’ error. To resolve this error, please follow given here.

If your error or query is not listed here, click here to see others.

Frequently Asked Questions (FAQs)

invalid_request

This may be because your primary domain would be different from your Shopify domain. To check your primary domain and make SSO work, follow the steps given here.

shopify_plan_expired

This issue arises when either the trial period of your Development plan is expired. Or if your plan is not auto-renewed from the Shopify end. Contact us at shopifysupport@xecurify.com to resolve the plan upgrade issue and get smooth functioning of the SSO – Single Sign On Application.

invalid_attributes_received

As email is a required entity in Shopify for account creation as well as login operation, Single Sign On is not successful in this case. To resolve this error, please follow given here.

encountered_an_error

When I am performing SSO, I am getting ‘Please verify if Shopify App is installed’ error. To resolve this error, please follow given here.

If your error or query is not listed here, click here to see others.

Frequently Asked Questions (FAQs)

I have followed the steps to set IDP but where can I check SSO?

Follow the steps outlined here to configure SSO in Shopify with your preferred IDP.

I installed the Shopify SSO application. I clicked on the “SETUP IDP” option but nothing opened up.

Redirection to any other site might be blocked in the browser. Please follow the steps given here to resolve the issue.

When I try to perform SSO, I get redirected to the “Incorrect App Configuration” page and then after subsequent attempts, I get redirected to https://store.xecurify.com/moas/login page.

You might be trying to perform SSO in the different tab of the same browser where you have opened our Single Sign-On – SSO Application or accessed the configuration portal of our application. In this case, SSO will be restricted due to security reasons.
Try to perform Single Sign On in a new incognito/private window or in a different browser in order to make SSO work.

After performing SSO, I want my customers to redirect to the collections or discount offer page.

Follow the steps outlined here to redirect your customer to collections/cart or any other page.

How do I enable the SSO application’s auto redirect to IDP feature on my Shopify store?

You must upgrade to the SSO application’s Enterprise plan to enable the Auto-Redirect to the IDP feature. Follow the steps outlined here to enable this feature.