Search Results :

×
Sign Up Contact Us

Contents

SAML Single Sign-On (SSO) For Shopify Using ADFS as Identity Provider

miniOrange allows ADFS to act as an identity provider (IDP), which allows users to Single Sign-On (SSO) into Shopify using ADFS credentials. Our application is compatible with all the SAML / OAuth-compliant Identity Providers. We will go through a step-by-step guide to configure Single Sign-On (SSO) into Shopify using ADFS as an identity provider (IDP) and Shopify store as service provider (SP).

Shopify ADFS SSO Login - download plugin button Download Application Shopify ADFS SSO Login - application pricing button Shopify ADFS SSO Login - plugin pricing button Pricing Plans

To configure SSO into Shopify using ADFS as an identity provider (IDP), you will need to install the miniOrange Shopify Single Sign-On - SSO Login Application on your store.


Youtube-color Created with Sketch.

Check out our video, to know more about how Single-Sign-On works in Shopify.

Follow the step-by-step guide to configure Single Sign-On in Shopify store using ADFS as an identity provider.

  • On ADFS, search for the ADFS Management application.
    • Shopify ADFS SSO Login - ADFS Management

  • After opening the ADFS Management, select Relying Party Trust and then click on Add Relying Party Trust.
    • Shopify ADFS SSO Login - Relying party trust

  • Select Claims Aware from the Relying Party Trust Wizard and click on the Start button.
    • Shopify ADFS SSO Login - Click on Start

    Select Data Source

  • In Select Data Source, select the data source for adding a relying party trust.
  • Now go to your Shopify store and navigate to the App section and click on Single Sign On - SSO login application.
    • Shopify ADFS SSO Login - Add SSO Application

  • Click on the Add identity Provider button to add your IDP.
    • Shopify ADFS SSO Login - Add identity provider

  • Select SAML protocol.
    • Shopify ADFS SSO Login - Select SAML Protocol

  • Now choose ADFS from the list of identity providers (IDPs).
    • Shopify ADFS SSO Login - Select ADFS as identity provider

  • Click on the Get metadata button as shown in the below screen to get the service provider metadata.
    • Shopify ADFS SSO Login - Click on get metadata

  • Navigate to SP Initiated Metadata section and copy the SP Initiated Metadata URL. Keep it handly as it will be used in furthur steps.
    • Shopify ADFS SSO Login - SP-initiated SSO

  • Select Import data about the relying party published online or on the local network option and add the Metadata URL copied from above in the Federation metadata address.
  • Click on Next.
    • Shopify ADFS SSO Login - Upload identity provider metadata

Note: In the next step enter the desired Display Name and click Next.

  • Navigate back to the miniOrange Single Sign On-SSO application and click on Add identity Provider button.
    • Shopify ADFS SSO Login - Add identity provider

  • Select SAML protocol.
    • Shopify ADFS SSO Login - Select SAML Protocol for ADFS

  • Now choose ADFS from the list of identity providers (IDPs).
    • Shopify ADFS SSO Login - Select ADFS as identity provider

  • Get the ADFS Federation Metadata URL by using this URL:
    https://< ADFS_Server_Name >/federationmetadata/2007-06/federationmetadata.xml.
  • Click on the Import IDP Metadata button.
    • Shopify ADFS SSO Login - Import metadata from ADFS

  • Select the upload method as Metadata Link. Paste the copied XML file link from above and Click on Import.
    • Shopify ADFS SSO Login - Upload metadata link of ADFS

  • Add the appropriate IDP Name and click on Save.
    • Shopify ADFS SSO Login - Add identity provider as ADFS

  • Click on Save.

Choose Access Control Policy

  • Select Permit everyone as an Access Control Policy & click on Next.
    • Shopify ADFS SSO Login - Access control policy as permit everyone

Ready to Add Trust

  • In Ready to Add Trust, click on Next and then Close.
    • Shopify ADFS SSO Login - Ready to add trust

Edit Claim Issuance Policy

  • In the list of Relying Party Trust, select the application you created and click on Edit Claim Issuance Policy.
    • Shopify ADFS SSO Login - Edit Claim Issuance Policy

  • In the Issuance Transform Rule tab, click on Add Rule >> OK button.
    • Shopify ADFS SSO Login - Add ADFS Rule

Choose Rule Type

  • Select Send LDAP Attributes as Claims and click on Next.
    • Shopify ADFS SSO Login - Send LDAP attribute as Claims

Configure Claim Rule

  • Enter the following details & click on Finish.
    • Claim rule name: Attributes
    Attribute Store: Active Directory
    LDAP Attribute: E-Mail-Addresses
    Outgoing Claim Type: Name ID
    Shopify ADFS SSO Login - Add SSO Application

You have successfully completed the ADFS side configurations.

  • After saving the IDP configuration, you will be redirected to Test Connection step.
  • Please perform Test Connection before mapping or fetching attributes, test connection ensures that your IDP configuration is correct.
  • Click on the Test Connection button.
    • Shopify ADFS SSO Login - Click Test Connection

  • On entering valid ADFS credentials you will see a pop-up window which is shown in the below screen.
    • Shopify ADFS SSO Login - Test Connection with ADFS

  • Click on the Fetch Attributes button to fetch IDP attribute.
    • Shopify ADFS SSO Login - Fetch identity provider attributes
  • Click on the + Attribute Mapping button to map attributes between Shopify and ADFS.
    • Shopify ADFS SSO Login - Add Attribute Mapping

  • Map the attributes by refering the table below:
    • Shopify ADFS SSO Login - Map the ADFS attributes

    Attribute Name in Shopify Choose the attribute from the list of predefined attributes
    Attribute Type IDP Attribute
    Attribute Value Select the attribute value you have fetched from your IDP

  • Click on Save.
    • Shopify ADFS SSO Login - Save attribute mapping
Shopify SSO Login - Enable SSO Login Button

Note: This step applies only to Shopify legacy accounts and not Shopify customer accounts.


  • Navigate to the Enable SSO Button section.
  • The following button attributes can be customized: button text, text below SSO button, background color, text color, width, and height.
Shopify SSO Login - Edit SSO Button

  • By default, the “Enable SSO Button” option is in enabled state.
  • If it is not, enable it first, then click the Enable Extension button, as shown in the image below.
Shopify SSO Login - Enable Extension

  • Enable the SSO Login Widget IDP extension.
  • You will see the Login with miniOrange button added to your Shopify store.
  • Click on Save
Shopify SSO Login - Enable SSO Login Widget

Auto-Redirect to IDP

Auto-Redirect users to the IDP's login page when they try to access the Shopify store.
Protect Complete Store with SSO

Restrict store access to logged-in users and redirect others to the password page.
Single Logout Endpoint (SLO)

End the user's session in the store and IdP when they log out from any connected platform

Users session extension

Extend user sessions beyond 24 hours, ensuring longer access without compromising security.
Email Domain Based Restrictions

Restrict user logins based on configured email domains, allowing or denying access accordingly.
Auto Tagging (After SSO)

Assign tags to users after SSO login for streamlined management and personalized experiences.
More FAQs ➔

Follow the steps outlined here to configure SSO in Shopify with your preferred IDP.

Redirection to any other site might be blocked in the browser. Please follow the steps given here to resolve the issue.

Follow the steps outlined here to redirect your customer to collections/cart or any other page.

You must upgrade to the SSO application’s Enterprise plan to enable the Auto-Redirect to the IDP feature. Follow the steps outlined here to enable this feature.

Please reach out to us at shopifysupport@xecurify.com, and our team will assist you with setting up the Shopify SSO application. Our team will help you to select the best suitable solution/plan as per your requirement.

ADFS_sso ×
Hello there!

Need Help? We are right here!

support