SSO (Single Sign-On)

We currently support two forms of SSO: Okta and Microsoft Azure AD. For any other integration methods, please reach out to your account manager to get started.

For any other integration methods, please reach out to your account manager to get started.

Okta

For Okta, we will need you to set up the following:

1. Sign-On URL: https://yourstoredomain.com/api/sso/login

2. Attributes (case sensitive)

   • first_name

   • last_name

   • email

3. Generate the SAML Signing cert

4. Share the metadata file/cert file

Microsoft Azure AD

For Microsoft Azure AD, we will need you to set up the following:

To get things started, you will need to create an application in your Azure Portal.

1. Under "App Registrations", register a new application of type "Web".

2. Redirect URIs - This is the url of the store as per screenshot

3. Under "App Registrations", register a new application of type "Web".

4. Set up the redirect URI for your store. This URI will be: https://yourstoredomain.com/auth_oauth/microsoft/signin

5. Choose the appropriate account type for your organization under supported account types (optional)

6. Generate a new client secret

7. Under API permissions, grant User.Read permissions

8. Share your client ID and secret