OAuth Single Sign-On (SSO) For Shopify Using Google as an Identity Provider

Pre-requisite: Single Sign-On SSO Application

To configure SSO into Shopify with Google Apps as IDP, you will need to install the miniOrange Single Sign On - SSO Login Application on your Shopify store:

Step by Step guide for Single Sign-On in Shopify Store Using Google apps

Step 1: Step to get the Redirect URI for the OAuth Server

• Go to your Shopify store, click on the Apps, tab and select the Single Sign On - SSO Login application.

• Click on the Setup IDP button in the top left of the navigation bar.

• From the left navigation bar select Configure SSO and click on Add Identity provider button.

• You can find the OAuth Callback URL/ Redirect URI in the OAuth 2.0 section. Keep the OAuth callback URL handy as you will need it later.

2.  Configure Shopify as aService Provider (SP) in Google Apps

• Go to https://console.developers.google.com/ and sign up/log in.
• Click on Select Project to create a new Google Apps Project, then click on NEW PROJECT. (refer to the image below)

• Enter your Project name under the Project Name field and click on Create

• Now, again click on Select a Project (highlighted in the image below) and select the newly created Project by clicking on the project name that you entered in the previous step.

• Go to Navigation MenuAPIs & ServicesCredentials.

• Click on the Create Credentials button and then select OAuth Client ID from the options provided.

• In case you are facing some warning saying that to create an OAuth Client ID, you must set a product name on the consent screen (as shown in the below image). Click on the Configure consent screen button.

• Choose how you want to configure and register your app and click on create button.

• Enter the required details such as App Name, User Support Email. and click on Save and Continue button.

• Scroll down and click on SAVE AND CONTINUE.


• Now for configuring scopes, click on Add or Remove the Scopes button.

• Now, Select the Scopes to allow your project to access specific types of private user data from their Google Account and click on Update button.

• Add test users for your application. Only test users will be able to access the app.

• Click on the SAVE AND CONTINUE button.

• Check all the details in the Summary section.

• Click on the BACK TO DASHBOARD button.

• Click on the Create Credentials button and then select OAuth Client ID from the options provided.

• Go to the Credentials tab and click on the Create Credentials button. Select Web Application from the dropdown list to create a new application. Enter the name you want for your Client ID under the name field and enter the Redirect/Callback URI which is copied from the Shopify store under the Authorized redirect URIs field.

• Click on the CREATE button to save your configurations.
• Copy your Client ID and Client Secret and save it on your Shopify SSO App Configuration.

• You have completed your Google App OAuth Server-side configurations.

3.  Configure Google Apps as an OAuth 2.0 Provider in Shopify.

• Again, go to your Shopify store, click on the Apps tab and select the Single Sign On - SSO Login application.

• Click on the Setup IDP button in the top left of the navigation bar.

• From the left navigation bar select the Configure SSO and click on the Add Identity provider button.

• Go to the OAuth 2.0 tab, and select the IDP name as a Google Apps from the dropdown.

• Enter the following values.

IdP Name	Google Apps
IdP Display Name	Choose the appropriate Name
Client ID	From step 2
Client secret	From step 2
Scope	email profile

4. Test Connection

• Go to the Configure SSO tab.
• Click on the Select >> Test Connection option against the Identity Provider you configured.

• On entering valid Google credentials you will see a pop-up window which is shown below screen.

5. User Attribute Mapping

You can map attributes coming from your Identity Provider into your Shopify store customer profile.

• Navigate to Single Sign On - SSO Application from the Admin Dashboard.
• Scroll down to the Attribute Mapping Section.

• Enter the First Name and Lastname attribute values by referring the below table.



Firstname	firstName
Lastname	lastName

• Save your configurations.

Hence you have successfully configured SSO between Shopify and Discord.

6. Testing SSO for your Shopify Store

• Go to your Shopify Store login page.(https://<your-shopify-storedomain>/account/login)
• Click on the login button you customized earlier.

• You’ll be redirected to the login page of the IDP you configured in previous step. Log in with your IDP account credentials.
• You’ll be successfully logged in to your Shopify store.

Hence your configuration of Google Apps as IDP in Shopify is completed.

Troubleshooting

If your error or query is not listed here, click here to see others.

Frequently Asked Questions (FAQs)

Choose your preferred Identity Provider and start setting up SSO for Shopify right away

If you are looking for anything which you cannot find, please drop us an email on shopifysupport@xecurify.com