I’d like to clarify this issue as it’s not clear at all from the documentation. We want to implement Shopify integration in our application, but we need the connecting user to already have an account in our application. That’s because we need to match the Shopify store with the other services and our app account.
The documentation says that when the user installs an app from the marketplace, the first screen they need to see is the authorization screen. In our case, the first screen is the login/register page if the user does not have an account with us.
We don’t necessarily need a listing on the marketplace, so is it possible to have our application reviewed and only start the OAuth flow from within our app? In that case, we would know which account is starting the flow and we’ll be able to match the access token to that account.
Thanks for the post! My Name is Ryan and I work on the app review team.
If you plan on submitting a public app as listed or unlisted on the Shopify App Store, all public apps are required to Authenticate using OAuth before any other step occurs. In your case, you would like the merchant to sign into an account prior to Authentication. This particular install flow would not be accepted as proper, and would be rejected in the app review process.
Since you mentioned the app does not need be listed, you could create a custom app. Custom apps are not reviewed by the app review team and you can choose whatever installation flow best suits your app. However, Authentication through OAuth is still required for the app to install on a merchants shop.
Is there a way to integrative my web app with shopify store , to let my customer access my web app by shopify account as SSO
I checked OAuth2 flow but it just for store owner (merchants)
any idea please?
We have the same issue. We are an iPaaS, like Zapier (and Workato, Tray.io, Boomi, etc.) where Shopify is just one of many apps our customers can connect to the platform.
When I go to Zapier, and ask to add Shopify as an app, the request is not initiated on Shopify but on Zapier, then OAuth is done to authenticate. This is the way we’ve also been doing it for years with many merchants connected.
Here’s the Zapier screen when I want to connect my Shopify store to my Zapier account:
Both some of your biggest partners in connected merchant count.
Also, I understand you want unlisted public apps to follow the same flow as listed apps for review, but how would a Merchant be able to even initiate the install on Shopify if an app is not listed?
Finally, you recommended custom apps in your message, but aren’t custom apps only for one store and cannot be used for more than one Merchant? Or did I get this wrong and Zapier is a custom app?
@yep@APIANT Hi apologies on resurfacing this thread but I was curious on if you found a solution, as I’m on the same boat and running into the same issue