• Home
• App Integrations
• BigCommerce Multi Store-Front Single Sign-On

miniOrange provides a comprehensive solution for BigCommerce Multi-Storefront SSO (Single Sign-On). Through the integration of miniOrange's SSO solution, BigCommerce customers gain the ability to login themselves once & gain access to all affiliated BigCommerce store-fronts. This eliminates the need for separate login credentials & simplifies the user experience, resulting in reduced friction.

With BigCommerce Multi Store-front SSO features, you can:

• Streamlined management: Centrally manage customer data and permissions across multiple storefronts, reducing administrative overhead.
• Scalability: miniOrange SSO solution can accommodate growing businesses with multiple storefronts, providing a scalable solution for managing user authentication.
• Enhanced customer satisfaction: The seamless login experience provides a convenient shopping experience for customers, leading to increased satisfaction and loyalty.

Verified Technology Partner of BigCommerce

SSO + MFA Support for any BigCommerce Plan (Standard, Plus, Pro, Enterprise)

Prerequisites

A. Branding & Customization

• Log into miniOrange Admin Console.
• Click on Customization in the left menu of the dashboard.
• In Basic Settings, set your company domain in Organization Name textfield.
• Click Save. Once that is set, the branded login URL would be of the format https://<company_domain>.xecurify.com/moas/login

B. Create BigCommerce API

• Log in to BigCommerce Admin Panel.
• Go to Settings >> API >> Store-level API Accounts.



• Click Create API Account and choose the token type as V2/V3 API Token.
• Add a suitable name for your API account.

Note: In BigCommerce, the API Path is the base URL that your application or integration uses to connect to your store’s data through BigCommerce APIs. The Store Hash is a unique identifier automatically generated by BigCommerce for each store. It appears in the API Path.



• Copy the highlighted Store Hash from the API Path.



• Enable the Customers option as Modify and Customers Login option as login. Keep rest of the settings as it is.
• Click on Save. Download the API credentials file. It contains the Access token, Client ID and Client Secret.




C. Fetch channel IDs

• To perform SSO into different storefronts/channels we will need the channel_ids of all the storefronts .
• To get all the channel_IDs and storefront url(redirect_url) of your BigCommerce store, you have 2 ways:

• Admin UI
• API Client

• Log in to your BigCommerce store admin panel.
• Click on the Channel Manager option in the left-hand menu.




Here you will see a list of all the channels with IDs and storefront urls that are currently connected to your BigCommerce store.

• Make a GET request to the following API endpoint:
• You can visit here and make an API call to fetch your channel_ids.



• If the request is successful, you will receive a JSON response containing an array of all channels connected to your store.
• Each channel object will contain information such as the channel type, channel ID, and channel name.
• That's it! You should now be able to retrieve all channels connected to your BigCommerce store via the API.

Follow the Step-by-Step Guide given below for BigCommerce Single Sign-On (SSO)

1. Configure BigCommerce in miniOrange

For multi-storefront setups, you can choose either of the following approaches based on your requirements:

• Configure a separate application for each store to manage them independently.
• Configure a single application and add multiple redirect URLs in the Basic Configuration tab to support multiple stores within one setup.

• Individual Apps
• Centralized App

• Login into miniOrange Admin Console.
• Go to Apps Click on Add Application button.



• In the Choose Application section, open the dropdown list of All Apps and select JWT.



• In the next step, search for BigCommerce application from the list and click on it.



• Enter the following values in the respective fields.



• Enter the Client ID, Client secret and Access token which we have downloaded from step 1 during API creation in BigCommerce Console.

  Display Name [Required]	BigCommerce (According to your choice)
  Redirect-URL [Required]	Refer to the Note section below to get the Redirect URL.
  Client ID	Copy from the downloaded file in Step 1
  Client Secret	Copy from the downloaded file in Step 1
  Access Token	Copy from the downloaded file in Step 1
  Description	According to your choice

  Note: Your Redirect URL should be: <Storefront URL>/login/token/
  For Example: https://xyz.bigcommerce.com/login/token/
  

  To find your Storefront URL: Go to Channels >> Storefronts. Copy the URL listed for your store.

  
  
  
• Now next move to Advanced tab.




Subject	E-Mail Address.
Signature Algorithm	HS256
Logout URL	Copy the storefront URL as mentioned above and append /login.php?action=logout

• Click Next to go to the Login Options tab.




Force Authentication	Enable if you want user to authenticate even if the user has a session.
Primary IDP	The identity source against which user will be authenticated.
User Mapping	Enable if you are sending the logged-in user from this app in the response.

• To perform Attribute Mapping and add new attributes, Navigate to the Attributes tab and Click on the +Add Attribute.
• The first three attributes will be hard-coded values.

Attribute Name	Attribute Type	Attribute Value
store_hash	Custom Attribute Value	Copy from the API Path as described in Create BigCommerce API (Prerequisites).
redirect_to	Custom Attribute Value	Endpoint where you wish to redirect the user to after sso. [Homepage or account page e.g. /account.php]
operation	Custom Profile Attribute	customer_login
first_name	External Idp Attribute	first_name
last_name	External Idp Attribute	last_name
email	External Idp Attribute	email




• Click on Save Button.
• Navigate to Policies tab.
• Click on Assign Group button.



• On the Assign Group section.
• Choose the DEFAULT group.
• Click on the Next button.



• Assign the policies to the group. Here, you can choose the primary authentication method for users. From the dropdown under First Factor, select Password.

First Factor

Password

• Click on Save.

• Log in to the miniOrange Admin Console and navigate to Apps.
• Open the application configured for a store and go to the Basic tab.
• Click on Add Redirect URL.
• Enter the required redirect URL for the additional store and click Save.



• Next, navigate to the Endpoints tab.
• Since a single application is configured for multiple stores, you will see multiple SSO URLs for authentication from miniOrange one for each store.

2. Configure Your User Directory (Optional)

miniOrange provides user authentication from various external sources, which can be Directories (like ADFS, Microsoft Active Directory, Microsoft Entra ID, OpenLDAP, Google, AWS Cognito etc), Identity Providers (like Okta, Shibboleth, Ping, OneLogin, KeyCloak), Databases (like MySQL, Maria DB, PostgreSQL) and many more. You can configure your existing directory/user store or add users in miniOrange.

• Setup miniOrange as IDP
• Setup External IDP

• To add your users in miniOrange there are 2 ways:
• Create User in miniOrange
• Bulk Upload Users

1. Create User in miniOrange

• Click on Users >> User List >> Add User.



• Here, fill the user details without the password and then click on the Create User button.



• After successful user creation a notification message "An end user is added successfully" will be displayed at the top of the dashboard.



• Click on Onboarding Status tab. Check the email, with the registered e-mail id and select action Send Activation Mail with Password Reset Link from Select Action dropdown list and then click on Apply button.



• Now, Open your email id. Open the mail you get from miniOrange and then click on the link to set your account password.
• On the next screen, enter the password and confirm password and then click on the Single Sign-On (SSO) reset password button.



• Now, you can log in into miniOrange account by entering your credentials.

2. Bulk Upload Users in miniOrange via Uploading CSV File.

• Navigate to Users >> User List. Click on Add User button.



• In Bulk User Registration Download sample csv format from our console and edit this csv file according to the instructions.



• To bulk upload users, choose the file make sure it is in comma separated .csv file format then click on Upload.



• After uploading the csv file successfully, you will see a success message with a link.
• Click on that link you will see list of users to send activation mail. Select users to send activation mail and click on Send Activation Mail. An activation mail will be sent to the selected users.

miniOrange integrates with various external user sources such as directories, identity providers, and etc.

• Okta
• ADFS
• Ping
• AWS Cognito
• Many more

Not able to find your IdP or Need help setting it up?

Contact us or email us at idpsupport@xecurify.com and we'll help you setting it up in no time.

3. Syncing Address, Form, and Custom Attribute Fields to BigCommerce (Optional)

To synchronize address, custom attributes, and form fields from the Identity Provider (IDP) to BigCommerce, the following details must be configured:

Address Fields

To successfully sync customer address information, the following attributes are required:

• first_name
• last_name
• address1
• city
• country_code

• miniOrange as IDP
• External Identity Provider

In the below diagram, we are using miniOrange as the IDP.

• Before syncing these fields to BigCommerce, first create the corresponding attributes in the miniOrange user profile. To do this, click the Add Custom Profile Fields button located in the top-right corner. Once created, these attributes can be mapped and synced to BigCommerce.



• Then we need to configure the attribute mapping in the application.

  Attribute Name	Attribute Type	Value
  addresses.first_name	First Name	-
  addresses.last_name	Last Name	-
  addresses.address1	Custom Profile Attribute	address1
  addresses.city	Custom Profile Attribute	city
  addresses.state_or_province	Custom Profile Attribute	state/province
  addresses.country_code	Custom Profile Attribute	country
  addresses.postal_code	Custom Profile Attribute	postal_code





Note: When sending the country value, always use the country code (e.g., US, IN). If you pass the full country name such as “United States”, the value will not be updated — only country codes are supported for correct mapping.

While syncing address fields, ensure that the city, state, and country values you provide are valid options supported by BigCommerce and exist in their respective dropdown lists.



• Now, after completing SSO, go to your BigCommerce dashboard. From the sidebar, click on Customers.
• You will see the list of all customers. Search for the specific user and click on their name.
• Next, open the Customer Address Book section — this is where you will be able to view the customer’s address details.

For the Sign up form fields:

• In BigCommerce, the following form fields are available. We need to configure the corresponding attribute mappings in the application to ensure these fields are correctly synced to BigCommerce.



• Then we need to configure the attribute mapping in the application.

  Attribute Name	Attribute Type	Value
  form_fields.name.0	Custom Attribute Value	Law School
  form_fields.value.0	Custom Attribute Value	XYZ
  form_fields.name.1	Custom Attribute Value	Bar Exam State
  form_fields.value.1	Custom Attribute Value	Arizona
  form_fields.name.2	Custom Attribute Value	Bar Exam Date
  form_fields.value.2	Custom Attribute Value	31-12-2025
  form_fields.name.3	Custom Attribute Value	Estimated Graduation Month
  form_fields.value.3	Custom Attribute Value	January
  form_fields.name.4	Custom Attribute Value	Estimated Graduation Year
  form_fields.value.4	Custom Attribute Value	2025




• After completing SSO, go to your BigCommerce dashboard.
• From the left sidebar, click on Customers.
• You will now see the list of all customers.
• Search for the specific user and click on their name.
• The customer profile will open — scroll down to the Customer Details section.
• Here, you will see the signup form fields, where you can view all the customer-submitted form-field details.

For the Attribute Fields

• In BigCommerce, the following attribute fields are available. We need to configure the corresponding attribute mappings in the application to ensure these fields are correctly synced to BigCommerce.



• Then we need to configure the attribute mapping in the application.

  Attribute Name	Attribute Type	Value
  color	Custom Profile Attribute	blue
  customer_address	Custom Profile Attribute	MG road
  customer_mobile	Custom Profile Attribute	+911234567890
  DOB	Custom Profile Attribute	2002-01-01
  attribute_string 01	Custom Profile Attribute	testing




• After completing SSO, go to your BigCommerce dashboard.
• From the left sidebar, click on Customers.
• You will now see the list of all customers.
• Search for the specific user and click on their name.
• The customer profile will open — scroll down to the Customer Details section.
• Here, you will see the attribute fields, where you can view all the customer-submitted form-field details.

NOTE: Update customer profile during sso

• Go to the BigCommerce application you have configured in miniOrange.
• Open the Advanced tab.
• Scroll to the bottom of the page.
• Enable the checkbox Update Customer Profile During SSO.

For ExternaI Identity Provider

• Before syncing these fields to BigCommerce, you must first create the corresponding attributes in the miniOrange user profile. These attributes will then be mapped and synced to BigCommerce.
• Then we need to configure the attribute mapping in the application.
• For Address field:

  Attribute Name	Attribute Type	Value
  addresses.first_name	External Idp Attribute	first_name
  addresses.last_name	External Idp Attribute	last_name
  addresses.address1	External Idp Attribute	street1
  addresses.city	External Idp Attribute	city
  addresses.state_or_province	External Idp Attribute	state
  addresses.country_code	External Idp Attribute	country
  addresses.postal_code	External Idp Attribute	zipcode





Note: When sending the country value, always use the country code (e.g., US, IN). If you pass the full country name such as “United States”, the value will not be updated — only country codes are supported for correct mapping.

While syncing address fields, ensure that the city, state, and country values you provide are valid options supported by BigCommerce and exist in their respective dropdown lists.



• Now, after completing SSO, go to your BigCommerce dashboard. From the sidebar, click on Customers.
• You will see the list of all customers. Search for the specific user and click on their name.
• Next, open the Customer Address Book section — this is where you will be able to view the customer’s address details.




For the Sign up form fields:

• In BigCommerce, the following form fields are available. We need to configure the corresponding attribute mappings in the application to ensure these fields are correctly synced to BigCommerce.




Attribute Name	Attribute Type	Value
form_fields.name.0	Custom Attribute Value	Law School
form_fields.value.0	External Idp Attribute	law_school
form_fields.name.1	Custom Attribute Value	Bar Exam State
form_fields.value.1	External Idp Attribute	bar_exam_state
form_fields.name.2	Custom Attribute Value	Bar Exam Date
form_fields.value.2	External Idp Attribute	bar_exam_date
form_fields.name.3	Custom Attribute Value	Estimated Graduation Month
form_fields.value.3	External Idp Attribute	month
form_fields.name.4	Custom Attribute Value	Estimated Graduation Year
form_fields.value.4	External Idp Attribute	year




• After completing SSO, go to your BigCommerce dashboard.
• From the left sidebar, click on Customers.
• You will now see the list of all customers.
• Search for the specific user and click on their name.
• The customer profile will open — scroll down to the Customer Details section.
• Here, you will see the signup form fields, where you can view all the customer-submitted form-field details.




For Custom Attribute Fields

• In BigCommerce, the following attribute fields are available. We need to configure the corresponding attribute mappings in the application to ensure these fields are correctly synced to BigCommerce.



• Then we need to configure the attribute mapping in the application.

  Attribute Name	Attribute Type	Value
  color	External Idp Attribute	color
  customer_address	External Idp Attribute	address
  customer_mobile	External Idp Attribute	mobile_number
  DOB	External Idp Attribute	birth_date
  attribute_string 01	External Idp Attribute	string




• After completing SSO, go to your BigCommerce dashboard.
• From the left sidebar, click on Customers.
• You will now see the list of all customers.
• Search for the specific user and click on their name.
• The customer profile will open — scroll down to the Customer Details section.
• Here, you will see the attribute fields, where you can view all the customer-submitted form-field details.




NOTE: Update customer profile during sso

• Go to the BigCommerce application you have configured in miniOrange.
• Open the Advanced tab.
• Scroll to the bottom of the page.
• Enable the checkbox Update Customer Profile During SSO.

4. Test SSO Configuration

• To test the SSO configuration, you will need the SSO Initiating URL.
  • Edit the JWT App you just created.
  • Go to the Endpoints tab and copy the SSO URL.



• Open an incognito/private browser window, paste the SSO URL, and hit enter.
  • You should be redirected to your Identity Provider (IdP).
  • After a successful login, you will be redirected back to your BigCommerce store as a logged-in user.

  • Note: If you have any issues while testing the SSO configurations, Click here to troubleshoot.

• Once successful, the next step is to add the SSO URL to your storefront login links.
  • Log in to BigCommerce as an Admin.
  • Navigate to Channel Manager >> Edit Storefront settings >> Themes >> Advanced >> Edit Theme Files.
  • A new window with theme files will open.
• The steps below apply to the Cornerstone theme. If you are using a different theme, adjust the changes accordingly.
• For Desktop View :
  • Navigate to Templates >> Components >> Common >> navigation.html.
  • Replace the existing login link: href="{{urls.auth.login}}" with href="<SSO-URL>".
  • click on Save and Apply File.
• For Mobile/Tablet View:
  • Navigate to Templates >> Components >> Common >> navigation.html.
  • Replace the existing login link: href="{{urls.auth.login}}" with href="<SSO-URL>".
  • click on Save and Apply File.
• Finally, go to your storefront URL, click on Login, and verify that SSO is working as expected.

5. Configure SLO in BigCommerce

• Download the script to initiate Single Logout (SLO) in BigCommerce.
• In your BigCommerce dashboard, navigate to Channels.
• Under the Storefronts section, find your storefront URL and click on Scripts.



• Click Create a Script and add the downloaded script to the Header section of the page.
• Enable the settings as shown in the image below.





• A text box will be opened where you can add the downloaded script.

External References

• Know more about Single-Sign On (SSO)
• What is Customer Identity and Access Management (CIAM)?
• Know more about BigCommerce Single-Sign On (SSO)

Frequently Asked Questions