Yes, the Shopify SSO application can apply Shopify customer tags based on the user roles received from PingFederate. Although this isn’t a standard Shopify feature, it is fully supported through the attribute mapping function within the SSO app itself, so no custom development is necessary.
How It Works with PingFederate and the Shopify SSO App
When a user logs in using PingFederate credentials, it sends a SAML assertion with user attributes like role, department, or access level. The Shopify SSO app can read these attributes and use them to tag the associated customer in Shopify.
Here’s a typical flow:
User starts SSO login on the Shopify storefront.
PingFederate verifies the user and includes the user role in the SAML response.
The Shopify SSO app gets the assertion and extracts the role attribute.
In the attribute mapping section of the SSO app’s admin panel, the role value is linked to the corresponding customer tag.
The tag is applied to the customer profile during SSO login. The user logs into Shopify with their tags assigned, enabling role-based access control.
Example
If a user has the role wholesale, the SSO app can automatically tag them as wholesale_customer in Shopify. This allows store owners to:
Show different pricing,
Limit access to certain collections,
Or trigger automated workflows based on the assigned tags.
By using the attribute mapping feature of the Shopify SSO app, you can quickly assign tags based on PingFederate roles. This helps create a secure login experience that suits your store’s needs.
