# Single sign on with Shopify Multipass

**URL:** https://meta.discourse.org/t/single-sign-on-with-shopify-multipass/100636
**Category:** SSO
**Created:** [October 27, 2018, 4:45pm UTC](https://meta.discourse.org/t/single-sign-on-with-shopify-multipass/100636 "2018-10-27T16:45:27Z")
**Posts on this page:** 18
**Page:** 1

<div class="post-metadata">

### Author: ![shawaj](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/shawaj/32/115970_2.png) [@shawaj](https://meta.discourse.org/u/shawaj)
#### Post date: [October 27, 2018, 4:45pm UTC](https://meta.discourse.org/t/single-sign-on-with-shopify-multipass/100636/1 "2018-10-27T16:45:27Z")

</div>

Is there an easy way to integrate with Shopify Multipass?

> **[Shopify Dev Docs](https://shopify.dev/docs)**
>
> Learn how to build an app, theme, custom storefront, or marketplace. Whether you're just getting started, deep in the development process, or ready to distribute and monetize your work, Shopify's docs, dev tools and frameworks make building easy and...

Thanks

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [October 30, 2018, 6:45am UTC](https://meta.discourse.org/t/single-sign-on-with-shopify-multipass/100636/2 "2018-10-30T06:45:44Z")

</div>

From the looks of it you would need a custom auth plugin. Is there any reason you prefer this over existing OAuth 2 support they also provide?

---

<div class="post-metadata">

### Author: ![shawaj](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/shawaj/32/115970_2.png) [@shawaj](https://meta.discourse.org/u/shawaj)
#### Post date: [October 30, 2018, 7:04am UTC](https://meta.discourse.org/t/single-sign-on-with-shopify-multipass/100636/3 "2018-10-30T07:04:31Z")

</div>

Does it offer the same functionality? If so then no other reason than I didn’t know about it!

Although it seems the oauth2 isn’t available on your lower hosted packages if I’m correct?

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [October 30, 2018, 7:06am UTC](https://meta.discourse.org/t/single-sign-on-with-shopify-multipass/100636/4 "2018-10-30T07:06:56Z")

</div>

Yeah our generic OAuth 2 plugin would be business and up, multi pass would require enterprise though and custom work

---

<div class="post-metadata">

### Author: ![shawaj](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/shawaj/32/115970_2.png) [@shawaj](https://meta.discourse.org/u/shawaj)
#### Post date: [October 30, 2018, 9:03am UTC](https://meta.discourse.org/t/single-sign-on-with-shopify-multipass/100636/5 "2018-10-30T09:03:40Z")

</div>

So I guess the best option is to go self hosted then.

Can we do OAuth2 on self hosted?

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [October 30, 2018, 9:17am UTC](https://meta.discourse.org/t/single-sign-on-with-shopify-multipass/100636/6 "2018-10-30T09:17:35Z")

</div>

You can do literally anything self-hosted, provided you have sufficient time and engineering expertise!

---

<div class="post-metadata">

### Author: ![shawaj](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/shawaj/32/115970_2.png) [@shawaj](https://meta.discourse.org/u/shawaj)
#### Post date: [October 30, 2018, 10:28am UTC](https://meta.discourse.org/t/single-sign-on-with-shopify-multipass/100636/7 "2018-10-30T10:28:15Z")

</div>

Sure but is there an OAuth plugin?

---

<div class="post-metadata">

### Author: ![j.jaffeux](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/j.jaffeux/32/60297_2.png) [@j.jaffeux](https://meta.discourse.org/u/j.jaffeux)
#### Post date: [October 30, 2018, 10:32am UTC](https://meta.discourse.org/t/single-sign-on-with-shopify-multipass/100636/8 "2018-10-30T10:32:45Z")

</div>

Yes

[https://github.com/discourse/discourse-oauth2-basic](https://github.com/discourse/discourse-oauth2-basic)

---

<div class="post-metadata">

### Author: ![Joshua\_Kogan](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/joshua_kogan/32/127595_2.png) [@Joshua\_Kogan](https://meta.discourse.org/u/Joshua_Kogan)
#### Post date: [April 3, 2020, 3:06pm UTC](https://meta.discourse.org/t/single-sign-on-with-shopify-multipass/100636/9 "2020-04-03T15:06:43Z")

</div>

Did you get this to work?

---

<div class="post-metadata">

### Author: ![david](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david/32/157490_2.png) [@david](https://meta.discourse.org/u/david)
#### Post date: [October 14, 2020, 12:10pm UTC](https://meta.discourse.org/t/single-sign-on-with-shopify-multipass/100636/10 "2020-10-14T12:10:23Z")

</div>

Note for future visitors, Shopify’s OAuth2 integration is for store-owners only, not end users

> [@Shopify + Discourse: Account Connections](https://meta.discourse.org/t/shopify-discourse-account-connections/127002/10):
>
> What I figured out was the fact that it isn’t possible to implement oauth for Shopify customers.

Multipass support might be possible with a custom plugin, but note it is not quite “SSO” in the conventional sense. I believe multipass goes the other way - it would allow people to click a link on the forum and be automatically logged into the shopify store.

---

<div class="post-metadata">

### Author: ![outofthebox](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/outofthebox/32/83708_2.png) [@outofthebox](https://meta.discourse.org/u/outofthebox)
#### Post date: [October 14, 2020, 1:52pm UTC](https://meta.discourse.org/t/single-sign-on-with-shopify-multipass/100636/11 "2020-10-14T13:52:07Z")

</div>

This is where you want to talk to The Pavilion (@Angus) about an integration between Shopify and Discourse.

---

<div class="post-metadata">

### Author: ![david](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david/32/157490_2.png) [@david](https://meta.discourse.org/u/david)
#### Post date: [October 14, 2020, 1:55pm UTC](https://meta.discourse.org/t/single-sign-on-with-shopify-multipass/100636/12 "2020-10-14T13:55:09Z")

</div>

I saw you had an old marketplace post here

> [@\[Paid\] Integrate Discourse, Shopify store, and our LMS payments](https://meta.discourse.org/t/paid-integrate-discourse-shopify-store-and-our-lms-payments/101311):
>
> What would you like done? I would like to integrate our Discourse community, a new Shopify store, and our existing LMS system. We want to open a Shopify account that is skinned to look like our website ([Rzim.org](http://Rzim.org)). We want to host it at [store.rzim.org](http://store.rzim.org) or similar. We want to sell RZIM Academy (LMS) courses through Shopify (utilizing Docebo’s pre-built integration: [https://www.docebo.com/knowledge-base/docebo-for-shopify/](https://www.docebo.com/knowledge-base/docebo-for-shopify/)) We want to sell RZIM gift cards that can be redeemed on the RZIM Shopify …

Did you/pavillion manage to get true SSO working with Shopify as the identity provider? If so, awesome! (and also I’d love to know which APIs you used to achieve it 😉 )

---

<div class="post-metadata">

### Author: ![outofthebox](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/outofthebox/32/83708_2.png) [@outofthebox](https://meta.discourse.org/u/outofthebox)
#### Post date: [October 14, 2020, 3:02pm UTC](https://meta.discourse.org/t/single-sign-on-with-shopify-multipass/100636/13 "2020-10-14T15:02:06Z")

</div>

Angus did pull it off, but by using Auth0 as the identity provider.

---

<div class="post-metadata">

### Author: ![david](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david/32/157490_2.png) [@david](https://meta.discourse.org/u/david)
#### Post date: [October 14, 2020, 3:20pm UTC](https://meta.discourse.org/t/single-sign-on-with-shopify-multipass/100636/14 "2020-10-14T15:20:59Z")

</div>

Cool! Does Auth0 use Shopify as the identity provider? Or has Shopify been configured to use Auth0 as the identity provider?

---

<div class="post-metadata">

### Author: ![outofthebox](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/outofthebox/32/83708_2.png) [@outofthebox](https://meta.discourse.org/u/outofthebox)
#### Post date: [October 14, 2020, 3:33pm UTC](https://meta.discourse.org/t/single-sign-on-with-shopify-multipass/100636/15 "2020-10-14T15:33:26Z")

</div>

I’ll let @Angus step in with all the technical answers. He’s great to work with!

---

<div class="post-metadata">

### Author: ![angus](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/angus/32/341715_2.png) [@angus](https://meta.discourse.org/u/angus)
#### Post date: [October 15, 2020, 10:19am UTC](https://meta.discourse.org/t/single-sign-on-with-shopify-multipass/100636/16 "2020-10-15T10:19:22Z")

</div>

> [@david](#):
>
> Does Auth0 use Shopify as the identity provider? Or has Shopify been configured to use Auth0 as the identity provider?

Auth0 is the identity provider.

Multipass is a great option if it’s available, but as mentioned, it’s an enterprise solution, i.e. you need to have Shopify Plus. If you’re using Multipass and Auth0 (or another identity provider) this is relatively straightforward. As to integrating multipass directly with Discourse (i.e. the original question), you’d need to build a plugin, but it wouldn’t be too hard.

In @outofthebox’s case Multipass wasn’t available. I implemented it using a shopify theme, [Auth0 Single Page App SDK Code Grant Flow with PKCE. - Auth0 Docs](https://auth0.com/docs/libraries/auth0-single-page-app-sdk) and a number of Auth0 rules. It’s somewhat involved. I hope to publish it at some point, but we’ll see.

There is probably scope for a Shopify Discourse App actually which would make this somewhat easier. I started to build it at one point, but found a more efficient way for the goal at hand.

---

<div class="post-metadata">

### Author: ![angus](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/angus/32/341715_2.png) [@angus](https://meta.discourse.org/u/angus)
#### Post date: [January 28, 2022, 12:10am UTC](https://meta.discourse.org/t/single-sign-on-with-shopify-multipass/100636/17 "2022-01-28T00:10:06Z")

</div>

Just a note that the code I referred to above is available here, along with a detailed readme.

[https://github.com/paviliondev/auth0-shopify-discourse](https://github.com/paviliondev/auth0-shopify-discourse)

Please note the warnings in the readme. I would not recommend you set this up unless you understand what this implementation is doing.

I plan to make a multipass integration (the official Shopify SSO solution) in the near future. If you’re interested in the multipass integration and want more concrete details you can PM me or reply here. If there’s signifcant interest I’ll prioritise it.

---

<div class="post-metadata">

### Author: ![Alex\_M](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/alex_m/32/251128_2.png) [@Alex\_M](https://meta.discourse.org/u/Alex_M)
#### Post date: [February 25, 2022, 8:31am UTC](https://meta.discourse.org/t/single-sign-on-with-shopify-multipass/100636/18 "2022-02-25T08:31:52Z")

</div>

Hey @angus we’re keen on a multipass integration (we’re on Shopify Plus and looking at setting up Discourse as a community for customers), could you send some more details and when you think you’ll have something developed?
