To enable logging users out of both Shopify and Auth0 at the same time is possible through the Single Logout (SLO) feature in the Shopify SSO application. Before configuring SLO, you must configure Single Sign-On between Shopify and Auth0.
Pre-requisites:
- Shopify Single Sign-On (SSO) Application: [LINK]
- Guide to configure SSO between Shopify and Auth0: [LINK]
- Developer's guide to configure Single Logout (SLO): [LINK]
Steps to Configure Single Logout (SLO):
Configure SSO between Auth0 and Shopify:
- Auth0: Log in and Click on Applications >> Create Application. Enter a name for the application and select Regular Web App. Select the Addons tab, and enable the SAML2 Web App. Copy and paste the ACS URL and Entity ID from the Shopify SSO application.
- Shopify: Navigate to the Shopify SSO application. Select the SSO protocol as SAML and choose Auth0 as an identity provider (IdP). Enter the display name as Auth0. Click on the Import IDP Metadata button and select the upload method as a metadata link. Copy and paste the link of the identity provider metadata from Auth0.
Enable SLO in the Shopify SSO App:
Auth0 offers a dedicated logout endpoint that clears its user session. Add the SAML logout URL of Auth0 in the "Single Logout URL" field, and the Shopify SSO app will manage both Shopify-initiated and Auth0-initiated logouts to ensure users are signed out from both Shopify and Auth0.
Benefits of Single Logout (SLO):
- Prevents unauthorized access.
- No need to remember to log out from multiple websites.
- Helps achieve certain data security requirements.
For more information, please feel free to contact our team.
