Single Sign-On (SSO) For Shopify Using Keycloak

Single Sign-On (SSO) For Shopify Using Keycloak


Keycloak Single Sign-On (SSO) for Shopify Store , miniOrange provides a ready to use solution. This solution ensures that you are ready to roll out secure access to Shopify Store using Keycloak within minutes.

Pre-requisite : Single Sign On - SSO Application

To configure SSO with Keycloak as IDP, you will need to install the miniOrange Single Sign On - SSO Application on your Shopify store:

miniOrange Provides Secure Single Sign-On (SSO) access to your Shopify applications(both plus and Non plus Stores).


Step by Step guide for Single Sign-On in Shopify Store Using Keycloak

1.  Configure Shopify as SP (Service Provider) in Keycloak:

  • Log in to the Keycloak Admin Panel.
  • Click on Clients from the left menu and then click on Create button to create a new client/application.
  • Creating an APP - Keycloak SAML Single Sign-On(SSO) for shopify - Keycloak SSO Login
    Add Client - Keycloak SAML Single Sign-On(SSO) for shopify - Keycloak SSO Login
  • For the above SAML configuration you need to get the Entity ID and ACS URLfrom miniOrange
  • Now go to your Shopify store and click on Setup IDP button in the top left in navigation bar.

    Single Sign-On (SSO)for Shopify (Plus and Non Plus), Configure IDP for enabling Single Sign-On (SSO)
  • Now click on the Click here link to get miniorange metadata as shown in Screen below.

    okt sso get miniorange metadata
  • For SP - INITIATED SSO section Select Show Metadata Details or click on Download Metadata.

    okta sso SPintiatedMetadata
  • Click on Select file and upload above downloaded metadata file.


  • Add Client - Keycloak SAML Single Sign-On(SSO) for shopify - Keycloak SSO Login metadata
  • For manual configuration, enter the values provided by Shopify as follows:
  • Client Id EntityID / Issuer
    Endpoints ACS URL

    Add Client - Keycloak SAML Single Sign-On(SSO) for shopify - Keycloak SSO Login
  • Click on Save for further configuration.
  • Provide the configurations values from Shopify over here:
  • Name Provide the name as your choice
    Client Protocol SAML
    Sign Assertion On
    Encrypt Assertion Off
    Client Signature Required Off
    Name ID Format Username
    Valid Redirect URIs ACS URL
    Keycloak SAML Single Sign-On(SSO) for shopifyConfiguration Keycloak SAML Single Sign-On(SSO) for shopify Configuration
  • Now in Fine Grain SAML Endpoint Configuration enter values as follows.
  • Assertion Consumer Service POST Binding URL ACS URL
    Logout Service Redirect Binding URL Single Sign-Out URL
    Keycloak SAML Single Sign-On(SSO) for shopify Client Configuration
  • Click on the Save button.
  • For IDP metadata, Go to Realms in left panel and click on SAML 2.0 Identity Provider Metadata.
  • JBoss Keycloak SSO-7 - Keycloak SAML Single Sign-On(SSO) for shopify - Keycloak SSO Login

2.  Configure Keycloak as IDP:

  • Now go to your Shopify store and click on Setup IDP button in the top left in navigation bar.

    Single Sign-On (SSO)for Shopify (Plus and Non Plus), Configure IDP for enabling Single Sign-On (SSO)
  • From the left navigation bar select Identity Provider
  • Keycloak SAML Single Sign-On(SSO) for shopify  Identity Provider
  • Select SAML. Click on Import IDP metadata.
  • Keycloak SAML Single Sign-On(SSO) for shopify  Import IDP metadata
  • Choose appropriate IDP name. Browse for the file downloaded in step 1.
  • Click on Import.
  • Keycloak SAML Single Sign-On(SSO) for shopify  Import
  • As shown in the below screen the IDP Entity ID, SAML SSO Login URL and x.509 Certificate will be filled from the file imported.
  • SAML SSO Login URL and x.509 Certificate
  • Click on Save.

3.  Test Connection

  • Go to Identity Providers tab.
  • Click on Select >> Test Connection option against the Identity Provider you configured.
  • Keycloak SAML Single Sign-On(SSO) for shopify  IDPTestConnection
  • On entering valid Keycloak credentials you will see a pop-up window which as shown in below screen.
  • Keycloak SAML Single Sign-On(SSO) for shopify  Login URL and x.509 Certificate
  • Hence your configuration of Keycloak as IDP in Shopify is sucesssfully completed.

Choose your preferred Identity Provider and start setting up SSO for Shopify right away


Additional Resources


If you are looking for anything which you cannot find, please drop us an email on shopifysupport@xecurify.com

Hello there!

Need Help? We are right here!

support
Contact miniOrange Support
success

Thanks for your inquiry.

If you dont hear from us within 24 hours, please feel free to send a follow up email to info@xecurify.com