SAML Single Sign-On (SSO) For Shopify Using Onelogin as Identity Provider
Overview
miniOrange allows OneLogin to act as an IDP (Identity Provider), which allows users to Single Sign-On (SSO) into Shopify using OneLogin Credentials. Our application is compatible with all the SAML / OAuth compliant Identity Providers. We will go through a step-by-step guide to configure Single Sign-On (SSO) into Shopify using OneLogin as IdP (Identity Provider) and Shopify store as SP (Service Provider).
Pre-requisites: Single Sign On - SSO Login Application
To configure SSO into Shopify using OneLogin as IDP, you will need to install the miniOrange Shopify Single Sign On - SSO Login Application on your store.
Check out our video, to know more about how Single-Sign-On works in Shopify.
Configuration Steps
Step by Step guide for Single Sign-On in Shopify Store using OneLogin
Step 1: Configuring Shopify as Service Provider (SP) in OneLogin.
- Login into your OneLogin Portal
- Go to Apps >> Company Apps >> Add Apps from the Navbar.
- In the search box, type SAML Test Connector and click on the App to add it.
- Enter the display name and click on Save.
- Click on the Configuration Tab.
- For the above SAML configuration, you need to get the Entity ID and ACS URL from Shopify
- Now go to your Shopify store and navigate to the App section and click on Single Sign On - SSO login application.
- Click on the Add identity Provider button to add your IDP.
- Select SAML protocol.
- Now choose Custom IDP from the list of IDPs.
- Click on the Get metadata button as shown in the below screen to get the service provider metadata.
- Navigate to SP Initiated Metadata section and copy down the ACS URL and Entity ID or Issuer.
- Enter the values in the SAML configuration as shown in below screen.
| Audience (EntityID) | Entity ID or Issuer |
| ACS (Consumer) URL Validator | ACS URL |
| Single Logout URL | Single Logout URL |
- You can view or edit the claims sent in the SAML token to the application under the Parameters tab.
- Go to the SSO Tab. Click on the More Actions button and download the SAML metadata. This will be used while configuring OneLogin as IDP in Step 2.
You have successfully completed OneLogin side configuration.
Step 2: Configure OneLogin as Identity Provider (IDP) in miniOrange.
- Navigate back to the miniOrange Single Sign On-SSO application and click on Add identity Provider button.
- Select SAML protocol.
- From the list of IDPs, select Custom IDP.
- Click on the Import IDP Metadata button.
- Select the upload method as Metadata Link. Paste the copied XML file link from Step 1 and Click on Import.
- If you don't have metadata file, you can also provide the details manually. You need to configure following endpoints:
| IDP Entity ID | Entity ID of IDP |
| Single Login URL | Login URL from IDP |
| Single Logout URL | Logout URL from IDP |
| X.509 Certificate | The public key certificate of your IDP. |
- Add the appropriate IDP Name and click on Save.
Step 3: Test Connection
- After saving the IDP configuration, you will be redirected to Test Connection step.
Please perform Test Connection before mapping or fetching attributes, test connection ensures that your IDP configuration is correct. - Click on the Test Connection button.
- On entering valid OneLogin credentials you will see a pop-up window which is shown in the below screen.
- Click on the Fetch Attributes button to fetch IDP attribute.
Step 4: Attribute Mapping
- Click on the + Attribute Mapping button to map attributes between Shopify and OneLogin.
- Map the attributes by refering the table below:
| Attribute Name in Shopify | Choose the attribute from the list of predefined attributes |
| Attribute Type | IDP Attribute |
| Attribute Value | Select the attribute value you have fetched from your IDP |
- Click on Save.
- Navigate to the application home page. Go to More actions against the IDP you have configured and click on Make Default button to make the IDP default.
Step 5: Testing SSO
- Go to your Shopify Store login page.(https://
/account/login) - Click on the login button you customized earlier.
- You’ll be redirected to the login page of the IDP you configured in previous step. Log in with your IDP account credentials.
- You’ll be successfully logged in to your Shopify store.
Hence your configuration of Gigya as IDP in Shopify is sucessfully completed.
FAQs
More FAQs ➔I have followed the steps to set IDP but where can I check SSO? 
Follow the steps outlined here to configure SSO in Shopify with your preferred IDP.
I installed the Shopify SSO application. I clicked on the “SETUP IDP” option but nothing opened up.
Redirection to any other site might be blocked in the browser. Please follow the steps given here to resolve the issue.
After performing SSO, I want my customers to redirect to the collections or discount offer page.
Follow the steps outlined here to redirect your customer to collections/cart or any other page.
How do I enable the SSO application’s auto redirect to the IDP feature on my Shopify store?
You must upgrade to the SSO application’s Enterprise plan to enable the Auto-Redirect to the IDP feature. Follow the steps outlined here to enable this feature.
Additional Resources
Get in Touch
Please reach out to us at shopifysupport@xecurify.com, and our team will assist you with setting up the Shopify Inventory Sync application. Our team will help you to select the best suitable solution/plan as per your requirement.
