Shopify signs in the staff user of a specific store. It authenticates against the Admin API, so the identity it establishes is a merchant, not a shopper.
Copy the redirect URI
In the Authdog console, select the project and environment, open Authentication > Providers, find Shopify, and click Enable. Copy the redirect URI shown in the form:
https://identity.authdog.com/api/v1/callback/<connectionId>Create the application
- Open the Shopify Partner dashboard and create an app, or create a custom app in the store's admin.
- Under App setup, add the redirect URI from Authdog to the Allowed redirection URL(s).
- Request the
read_products,read_orders, andread_customersscopes. - Copy the Client ID (API key) and Client secret.
- Note the store's
myshopify.comhost, that is the Domain URI.
Configure Authdog
| Field | Value |
|---|---|
| Client ID | The client identifier from the provider |
| Client Secret | The client secret from the provider |
| Domain URI | The store's myshopify host, e.g. https://acme.myshopify.com |
Save, then toggle the connection active.
What Shopify returns
Authdog requests the read_products read_orders read_customers scopes and reads the profile from <domain>/admin/api/2024-04/shop.json.
The shop endpoint returns the store record (shop id, name, and the shop owner's email), which Authdog uses as the profile.
Because the Domain URI names one store, one connection signs in one store. A multi-store product needs a connection per store, or a different integration pattern.
Test it
- Open your environment's hosted sign-in page, or link to
https://identity.authdog.com/api/v1/signin/<connectionId>. - Select the Shopify button and complete the flow.
- Confirm the user appears under Users in the console with a Shopify identity linked.
Troubleshooting
| Symptom | Cause |
|---|---|
invalid_request: redirect_uri is not whitelisted |
The URI is missing from the allowed redirection URLs |
403 from the shop endpoint |
The app lacks the requested read scopes on that store |
| Redirect or callback URL error | The URI registered with the provider does not match Authdog's exactly |
| Works in one environment only | Each environment has its own connectionId, and so its own redirect URI to register |
Related
| Read | To learn how to |
|---|---|
| Connectors | Set up any other social provider |