Shopify signs in the staff user of a specific store. It authenticates against the Admin API, so the identity it establishes is a merchant, not a shopper.
Copy the redirect URI
In the Authdog console, select the project and environment, open Authentication > Providers, find Shopify, and click Enable. Copy the redirect URI shown in the form:
https://identity.authdog.com/api/v1/callback/<connectionId>Create the application
- Open the Shopify Partner dashboard and create an app, or create a custom app in the store's admin.
- Under App setup, add the redirect URI from Authdog to the Allowed redirection URL(s).
- Request the
read_products,read_orders, andread_customersscopes. - Copy the Client ID (API key) and Client secret.
- Note the store's
myshopify.comhost — that is the Domain URI.
Configure Authdog
| Field | Value |
|---|---|
| Client ID | The client identifier from the provider |
| Client Secret | The client secret from the provider |
| Domain URI | The store's myshopify host, e.g. https://acme.myshopify.com |
Save, then toggle the connection active.
What Shopify returns
Authdog requests the read_products read_orders read_customers scopes and reads the profile from <domain>/admin/api/2024-04/shop.json.
The shop endpoint returns the store record — shop id, name, and the shop owner's email — which Authdog uses as the profile.
Because the Domain URI names one store, one connection signs in one store. A multi-store product needs a connection per store, or a different integration pattern.
Test it
- Open your environment's hosted sign-in page, or link to
https://identity.authdog.com/api/v1/signin/<connectionId>. - Select the Shopify button and complete the flow.
- Confirm the user appears under Users in the console with a Shopify identity linked.
Troubleshooting
| Symptom | Cause |
|---|---|
invalid_request: redirect_uri is not whitelisted |
The URI is missing from the allowed redirection URLs |
403 from the shop endpoint |
The app lacks the requested read scopes on that store |
| Redirect or callback URL error | The URI registered with the provider does not match Authdog's exactly |
| Works in one environment only | Each environment has its own connectionId, and so its own redirect URI to register |
Related
| Read | To learn how to |
|---|---|
| Connectors | Set up any other social provider |