SAML Single Sign-On (SSO) Solution For Shopify Using Keycloak as IDP


miniOrange allows Keycloak to act as an IDP (Identity Provider), which allows users to Single Sign-On (SSO) into Shopify using Keycloak Credentials. Our application is compatible with all the SAML / OAuth compliant Identity Providers. We will go through a step-by-step guide to configure Single Sign-On (SSO) into Shopify using Keycloak as IdP (Identity Provider) and Shopify store as SP (Service Provider).

Pre-requisite : Single Sign On - SSO Application

To configure SSO into Shopify using Keycloak as IDP, you will need to install the miniOrange Single Sign On - SSO Application on your Shopify store:

miniOrange Provides Secure Single Sign-On (SSO) access to your Shopify Store(both plus and Non plus Stores).


Step by Step guide to setup Single Sign-On in Shopify Store Using Keycloak as IDP

1.  Configure Shopify as SP (Service Provider) in Keycloak:

  • Log in to the Keycloak Admin Panel.
  • Click on Clients from the left menu and then click on Create button to create a new client/application.
  • Creating an APP - Keycloak SAML Single Sign-On(SSO) for shopify - Keycloak SSO Login
    Add Client - Keycloak SAML Single Sign-On(SSO) for shopify - Keycloak SSO Login
  • For the above SAML configuration you need to get the Entity ID and ACS URLfrom miniOrange
  • Now go to your Shopify store and click on Setup IDP button in the top left in navigation bar.

    shopify app section - single sign on application
  • Now click on the Click here link to get miniorange metadata as shown in Screen below.

    Single Sign-On (SSO)for Shopify (Plus and Non Plus), Configure IDP for enabling Single Sign-On (SSO)
  • For SP - INITIATED SSO section Select Show Metadata Details or click on Download Metadata.

    okta sso SPintiatedMetadata
  • Click on Select file and upload above downloaded metadata file.


  • Add Client - Keycloak SAML Single Sign-On(SSO) for shopify - Keycloak SSO Login metadata
  • For manual configuration, enter the values provided by Shopify as follows:
  • Client Id EntityID / Issuer
    Endpoints ACS URL

    Add Client - Keycloak SAML Single Sign-On(SSO) for shopify - Keycloak SSO Login
  • Click on Save for further configuration.
  • Provide the configurations values from Shopify over here:
  • Name Provide the name as your choice
    Client Protocol SAML
    Sign Assertion On
    Encrypt Assertion Off
    Client Signature Required Off
    Name ID Format Username
    Valid Redirect URIs ACS URL
    Keycloak SAML Single Sign-On(SSO) for shopifyConfiguration Keycloak SAML Single Sign-On(SSO) for shopify Configuration
  • Now in Fine Grain SAML Endpoint Configuration enter values as follows.
  • Assertion Consumer Service POST Binding URL ACS URL
    Logout Service Redirect Binding URL Single Sign-Out URL
    Keycloak SAML Single Sign-On(SSO) for shopify Client Configuration
  • Click on the Save button.
  • For IDP metadata, Go to Realms in left panel and click on SAML 2.0 Identity Provider Metadata.
  • JBoss Keycloak SSO-7 - Keycloak SAML Single Sign-On(SSO) for shopify - Keycloak SSO Login
You have successfully completed Keycloak side configuration.

2.  Configure Keycloak as IDP:

  • Again, go to your Shopify store, click on the Apps tab and select the Single Sign On - SSO Login application.
  • shopify app section - single sign on application
  • Click on the Setup IDP button in the top left in the navigation bar.
  • Single Sign-On (SSO)for Shopify (Plus and Non Plus), Configure IDP for enabling Single Sign-On (SSO)
  • From the left navigation bar select Identity Provider
  • Keycloak SAML Single Sign-On(SSO) for shopify  Identity Provider
  • Select SAML. Click on Import IDP metadata.
  • Keycloak SAML Single Sign-On(SSO) for shopify  Import IDP metadata
  • Choose appropriate IDP name. Browse for the file downloaded in step 1.
  • Click on Import.
  • Keycloak SAML Single Sign-On(SSO) for shopify  Import
  • As shown in the below screen the IDP Entity ID, SAML SSO Login URL and x.509 Certificate will be filled from the file imported.
  • SAML SSO Login URL and x.509 Certificate
  • Click on Save.
You have successfully completed Shopify side configuration.

3.  Test Connection

  • Go to Identity Providers tab.
  • Click on Select >> Test Connection option against the Identity Provider you configured.
  • Keycloak SAML Single Sign-On(SSO) for shopify  IDPTestConnection
  • On entering valid Keycloak credentials you will see a pop-up window which as shown in below screen.
  • Keycloak SAML Single Sign-On(SSO) for shopify  Login URL and x.509 Certificate
  • Hence your configuration of Keycloak as IDP in Shopify is sucesssfully completed.

4.   Testing SSO for your Shopify Store

  • Go to your Shopify Store login page.(https://<your-shopify-storedomain>/account/login)
  • Click on the login button you customized earlier.
  • select project google oauth provider
  • You’ll be redirected to the login page of the IDP you configured in previous step. Log in with your IDP account credentials.
  • You’ll be successfully logged in to your Shopify store.
Hence your configuration of Keycloak as IDP in Shopify is sucesssfully completed.

Choose your preferred Identity Provider and start setting up SSO for Shopify right away


Additional Resources


If you are looking for anything which you cannot find, please drop us an email on shopifysupport@xecurify.com

Hello there!

Need Help? We are right here!

support
Contact miniOrange Support
success

Thanks for your inquiry.

If you dont hear from us within 24 hours, please feel free to send a follow up email to info@xecurify.com