• Home
• App Integrations
• BigCommerce Azure B2C Single Sign-On

miniOrange provides a ready to use Azure AD B2C solution for BigCommerce. This solution ensures that you are ready to roll out secure access to BigCommerce using Azure ad b2c within minutes. Azure Active Directory B2C provides business-to-customer identity service for your customers to use their preferred local account identities, social or enterprise to get Single Sign-On (SSO) access to your apps and APIs.

Prerequisites

• Log into miniOrange Admin Console.
• Click on Customization in the left menu of the dashboard.
• In Basic Settings, set your company domain in Organization Name textfield.
• Click Save. Once that is set, the branded login URL would be of the format https://<company_domain>.xecurify.com/moas/login

Follow the Step-by-Step Guide given below for BigCommerce Single Sign-On (SSO)

1. Configure miniOrange as Service Provider (SP) in Azure B2C

• Go to your Azure B2C portal page. Click on Applications and then Add.



• Give a name to your app and toggle ON the Web App and Implicit flow options.



• To get the Redirect URL:
• Go to miniOrange Admin Console.
• From the left navigation bar select Identity Provider.



• Copy the Callback URL as Redirect URL required for next step.



• Paste the OAuth Callback URL from above step in the Reply URL field.
• Click on Register.
• Go to your application. Click on Certificates and secrets.
• Create New client secret.



• Click on Save.
• Once saved, the generated secret will be revealed.
• Copy the value as your application's Client Secret.



• Go to User Flow and add New User Flow.



• Select Sign up and Sign in User Flow type.



• Give a name to your policy and save.
• Check the user attributes Given Name, Surname, email in the User attributes and token claims section given below.



• Click on Create.
• Go to Application registrations >> Overview.
• Copy the Application (client) ID. We will require this later.



• Go to Application registrations >> Endpoints.
• Replace the “policy-name” in the endpoints urls with your user flows (policy name).
• Copy these endpoints and paste them into miniOrange while configuring Azure B2C as OAuth 2.0 Provider given in the next step.

2. Configure Azure B2C as OAuth 2.0 Provider in miniOrange.

• Go to miniOrange Admin Console.
• From the left navigation bar select Identity Provider. Select Oauth.





• Enter the following values.

IdP Name	Custom Provider
IdP Display Name	Choose appropriate Name
OAuth Authorize Endpoint	From here
OAuth Access Token Endpoint	From here
Client ID	From step 1
Client secret	From step 1
Scope	auto

• Click Save
• Navigate back to View Identity Providers page.
• Click on select against the configured IDP and select Make Default.

3. Configure BigCommerce in miniOrange

3.1. Create BigCommerce API

• Log in to BigCommerce Admin Panel.
• Go to the Settings from the menu, scroll down and select API Accounts.



• Click on Create API Account and choose Create V2/V3 API Token option from the menu shown.
• Add a suitable name for your API account.
• API Path will be used as the store_hash value when we configure BigCommerce in miniOrange which will require in step2.



• Enable the Customers option as Modify and Customers Login option as login. Keep rest of the settings as it is.
• Click on Save.



• Download the API credentials file. It contains the API token, Client ID and Client Secret.

3.2. Configure BigCommerce in miniOrange

• Login into miniOrange Admin Console.
• Go to Apps Click on Add Application button.



• In Choose Application Type click on Create App button in JWT application type.



• In the next step, search for BigCommerce application from the list and click on it.



• Enter the following values in the respective fields.
1. Custom Application Name [Required] : BigCommerce (According to your choice)
2. Description : According to your choice
3. Redirect-URL [Required] : Storefront URL, e.g. https://{{my-store}}.mybigcommerce.com/login/token/
4. Logout-URL : https://{{my-store}}.mybigcommerce.com
5. Force Authentication : Enable if you want user to authenticate even if the user has a session
6. Primary IDP : The identity source against which user will be authenticated
7. User Mapping : Enable if you are sending the logged-in user from this app in the response



1. Group Name : Default
2. Policy Name : Add policy name according to your Preference
3. Login Method : Password



• Click on Save.
• For Attribute Mapping, navigate to Select >> Edit next to your configured application.



• Enter the Client Id, App Secret and Access Token (which we have downloaded from step 1 during API creation in BigCommerce Console).
• For Signature Algorithm, select HS-256 from the dropdown menu.
• Set Subject to E-Mail Address.



• You need to map the following attributes coming in from the idp by choosing the external IDP option.



• Click on Save.
• Now, You can access BigCommerce Account Using IDP credentials through the Single-sign-on URL as shown in image above.

External References

• Know More about Single Sign On
• SP-Initiated v/s IdP-Initiated SSO
• Learn more about how miniOrange functions as an Identity Broker
• Configure Azure B2C SSO into Multiple Apps