Tribe Single Sign-On (SSO) using Shopify Store as Identity Provider

Pre-requisite : Store as IDP- SSO Login Application

To configure SSO into Tribe with Shopify as IDP, you will need to install the miniOrange Store as IDP- SSO Login Application on your store

Step by Step guide for Single Sign-On in Tribe Using Shopify Store as an IDP

1. Step to get the Redirect URI for Shopify store

• Log into your Tribe account as an admin.
• Go to the Admin Settings → General Settings.You can find the Callback/Redirect URL under the Verify State option. Copy the Callback/Redirect URL. Keep this URL handy, as you will need it later.

2. Configure Tribe in Shopify Store

• Go to your shopify store, click on Apps tab and select Store as IDP-SSO login application.

• From the left navigation bar select Apps and click on Add Application button.

• Go to OAuth/OIDC tab and select the IDP name as a OAuth2/OpenID Connect from the list.

• In the Add Application Section enter the values by refering the below table.

Client Name	Choose an appropriate name according to your choice.
Redirect URI/ OAuth Callback URI	From Step 1.
Description	Add appropriate description according to your choice.
Group Name	DEFAULT
Policy Name	Tribe
Login Method	Password


• Click on Save to save the configurations.
• After saving the application,click on Select and then Edit option of the application you just configured.

• You will get the Client Id, Client Secret, Endpoints and Scopes. Keep these values handy as you will need them later.

• Now, from the left navigation bar go to the Apps and click on Go back to store button from the top right side.

• Enter primary domain name of your Shopify Store (remove "https:" and slashes) and click on Save button.


You have successfully configured Tribe application in Shopify Store.

3. Setup SSO in Tribe application.

• Login to your Tribe application and click on admin panel button.

• Click on Apps to create a new application (refer to image below).

• Search for OAuth2 SSO and click on Install button.

• Now, fill in the required details like Client ID, Client Secret, Endpoints, Scope and enter the SSO button domain supported by the application.
• Turn on the "Enable OAuth2 alongside Tribe authentication" option to show a button pointing to your Single Sign-On provider. You can name it under the "SSO Button" textbox. And click on Update button.
• Please refer to the below table for configuring the values.

Client ID	From step 2
Client secret	From step 2
Scope	email openid profile
Authorization Endpoint	https://store.xecurify.com/moas/broker/login/oauth/
Token Endpoint	https://store.xecurify.com/moas/rest/oauth/token
Get User Info Endpoint	https://store.xecurify.com/moas/rest/oauth/getuserinfo

4. Test Tribe Single Sign-On Configuration

• Go to https://{Your-Tribe-Domain} and sign in/login.
• You will get a login window of Tribe with a button name configured by you.
• Click on the “Login with miniOrange” button and you will be redirected to the login page of the Shopify store.

• Enter your Shopify Store login credentials and click on Login.

• You will be successfully logged in to your Tribe account.

You have successfully configured Shopify as Identity Provider for your Tribe application.