What's your biggest current challenge? Have your say in Community Polls along the right column.
Our Partner & Developer boards on the community are moving to a brand new home: the .dev community forums! While you can still access past discussions here, for all your future app and storefront building questions, head over to the new forums.

Shopify auth and SSO in external app, possible or not

Shopify auth and SSO in external app, possible or not

clandestino_bgd
Shopify Partner
9 0 2

Hello, we are building an app that needs to do some complex calculations and reporting related to Shopify customers and orders.

We have built a Shopify custom app (SA) that gets customers, products, and orders through webhooks (we could use amazon event-bridge for that as well), and now we need to add some rich set of reporting and admin features that are updating Shopify customers. The client Shopify store has a Shopify Plus license.

I see 2 options and I would like to ask for some clarifications


1. We build a reporting app (RA) as a new Shopify app (or upgrade of our existing Shopify app (SA)), so it can write back to Shopify directly. The problem is that we need to authenticate RA users using Shopify and keep them logged in if they are logged in Shopify. How to do that? In other words, how can we use Shopify as Auth and SSO provider? We want all users to be initially added through Shopify registration. In our reporting app (RA), we want to update customer tags, as a result, of the calculation. 
2. Reporting app has no real user management, all the users are Shopify users and the RA endpoints are called through app proxy.  The custom client code in Shopify will update Shopify customers, so no need to write back anything. The problem then is how to pass logged-in customerId to our RA and how to do that in a secure way so that another user cannot see someone else's report.

Thanks,
Milan

Replies 4 (4)

Filljoy
Shopify Partner
211 10 67
clandestino_bgd
Shopify Partner
9 0 2

Yes, I saw this article about SAML, but thought there could be easier / cheaper way.

I am evaluating AWS Cognito since it seems much more cost-effective than Okta or Auth0, but I cannot find any document that explains how to do that.

The only way I found is through Mini Orange App.

Also, how can I test SSO that without a live real Shopify Plus store?

Kaustubh99
Shopify Partner
11 0 1

Hi,

 

There is a very economical solution available which you can find here

As I can see that you have already mentioned the miniOrange Single Sign-On Solution. I would like to share my experience with miniOrange. 

I was able to integrate SSO using Okta as the Identity Provider for my Shopify Store. Just followed this guide and configured the SSO app with Okta as an Identity Provider and I was able to setup the configuration within a few minutes.

miniOrange provides an SSO solution for Shopify Non-Plus and Plus versions. They provide Shopify SSO with any capable identity providers supporting all the Standard Authentication Protocols like SAML 2.0, OAuth 2.0, OpenID, JWT, LDAP etc.

They have provided a reliable Single Sign-on (SSO) solution. Our users have never faced a sign-on problem. They also have a high level of a security policy by configuring MFA (Multi-Factor Authentication). You can check out their Single Sign On - SSO Login App available on the Shopify Appstore.

sho_engine
Shopify Partner
2 0 0

Do you know how MiniOrange archived this?