OAuth Single Sign-On (SSO) For Shopify Using FusionAuth as IDP

Pre-requisite: Single Sign On - SSO Login Application

To configure SSO into Shopify with FusionAuth as IDP, you will need to install the miniOrange Shopify Single Sign On - SSO Login Application on your store:

Shopify Single Sign-On (SSO)

By miniOrange

miniOrange Provides Secure Single Sign-On (SSO) access to your Shopify store (both plus and Non-plus).

Get this application

Step by Step guide for Configuring FusionAuth as IDP for SSO into Shopify

1.   Get the OAuth Callback URL from the Shopify SSO application

• Go to your Shopify store and navigate to the App section and click on Single Sign On - SSO login application.

• Click on the Add identity Provider button to add your IDP.

• Select OAuth 2.0 protocol.

• Now choose Custom IDP from the list of IDPs.

• Copy the OAuth Callback URL and kepp it handy as it will be used in furthur step.

2.  Configure Shopify as SP in FusionAuth

• Log in to your FusionAuth account.

• Navigate to the Applications" tab on the FusionAuth dashboard and then click the Green plus button to add a new application.

• You must give your application a name on the Application Creation page. This is done so that your application can be distinguished in the dashboard. Provide an appropriate name for your application.

• Now select the OAuth tab. The default settings should be fine; the only thing you need to change is the Authorised redirect URLs section. Paste the OAuth Callback URL you copied in Step 1.

• Please keep in mind that FusionAuth will only provide login functionality by default, and you will have to manually create new users via the admin panel. This is useful if you're creating an internal site and don't want users to register. However, if you're creating a store, you'll probably want users to be able to create an account, so let's enable that. Enable self-service registration by clicking the Registration tab. The default settings should be adequate.

• Click the blue Save button in the upper-right corner of the page.
• You will now be shown a list of your applications. Click the Green looking glass icon next to the newly created application.

• Copy the Client ID and Client Secret from the Details window.

• You have completed FusionAuth side configurations.

3.   Configure FusionAuth as IDP in Shopify

• Navigate back to the miniOrange Single Sign On-SSO application and click on Add identity Provider button.

• Select OAuth 2.0 protocol.

• From the list of IDPs, select Custom IDP.

• Now, fill in the required details like Client ID, Client Secret, Endpoints, and Scope.
• Please refer to the below table for configuring the values.



IDP Display Name	FusionAuth
OAuth Authorize Endpoint	https://<your-fusionauth-instance-url>/oauth2/authorize
OAuth Access Token Endpoint	https://<your-fusionauth-instance-url>/oauth2/token
OAuth Get User Info Endpoint	https://<your-fusionauth-instance-url>/oauth2/userinfo
Client ID	from step 2
Client secret	from step 2
Scope	openid

4. Test Connection

• Go to the Configure SSO tab.
• Click on the Select >> Test Connection option against the Identity Provider you configured.

• On entering valid FusionAuth credentials you will see a pop-up window which is shown in the below screen.

5.   Attribute Mapping

• Click on the + Attribute Mapping button to map attributes between Shopify and FusionAuth.

• Map the attributes by refering the table below:


Attribute Name in Shopify	Choose the attribute from the list of predefined attributes
Attribute Type	IDP Attribute
Attribute Value	Select the attribute value you have fetched from your IDP

• Click on Save.

• Navigate to the application home page. Go to More actions against the IDP you have configured and click on Make Default button to make the IDP default.

5. Testing SSO for your Shopify Store

• Go to your Shopify Store login page.(https://<your-shopify-storedomain>/account/login)
• Click on the login button you customized earlier.

• You’ll be redirected to the FusionAuth sign-in page.

• You can sign in with an existing account or create a new one here. To create a fresh account, simply click Create an account and you'll be taken to the registration form.

• Enter your email address and password, then click the Register button. After creating a new account, go to the Customers page in your Shopify admin dashboard to ensure that the new user has been added.

• You’ll be successfully logged in to your Shopify store.

In this Guide, you have successfully configured FusionAuth Single Sign-On (SSO) by configuring FusionAuth as an OAuth Provider and Shopify as an OAuth Client using our Shopify Single Sign-On - SSO Login App. This solution ensures that you are ready to roll out secure access to your Shopify Store using FusionAuth login credentials within minutes.

Troubleshooting

If your error or query is not listed here, click here to see others.

Frequently Asked Questions (FAQs)

Choose your preferred Identity Provider and start setting up SSO for Shopify right away

If you are looking for anything which you cannot find, please drop us an email on shopifysupport@xecurify.com