• Home
• App Integrations
• BigCommerce Single Sign-On

BigCommerce Single Sign-On (SSO) solution by miniOrange provides seamless access into BigCommerce Store using your existing credentials from any preferred External Directory of your choice. This allows organizations to securely access their BigCommerce Store and easily manage user access, while also providing a seamless login experience for end-users. A One in all solution for - Centralized Management & Storage of customer data, Store to Store sync, Order status notification, Social login —> for your BigCommerce Store.

With BigCommerce SSO & CIAM features, you can:

• Enable your users to automatically log into BigCommerce Store.
• Establish SSO for multiple BigCommerce storefronts, enabling customers to access all stores using a single password.
• Connect easily with any external identity source like Azure AD, Auth0, AWS Cognito, OKTA, etc.
• Provide extra layer of security on your BigCommerce store with 2-Factor Authentication (OTP over SMS/Email).

Verified Technology Partner of BigCommerce

SSO + MFA Support for any BigCommerce Plan (Standard, Plus, Pro, Enterprise)

Follow the Step-by-Step Guide given below for BigCommerce Single Sign-On (SSO)

1. Create BigCommerce API

• Log in to BigCommerce Admin Panel.
• Go to Settings >> API >> Store-level API Accounts.



• Click Create API Account and choose the token type as V2/V3 API Token.
• Enter any name for the API account.
• Copy the Store Hash from the API Path. It looks like /stores/abcd1234/v3/ → Store Hash = abcd1234.
• Copy the highlighted Store Hash from the API Path.



• Set permissions:
• Customers: Modify
• Customer Login: Login
• Download the credentials file. This contains your:
• Client ID
• Client Secret
• Access Token

2. Configure BigCommerce in miniOrange

Here you’ll create a JWT application inside miniOrange that connects to your store.

• Login into miniOrange Admin Console.
• Go to Apps click on Add Application button.



• In the Choose Application section, open the dropdown list of All Apps and select JWT.



• In the next step, search for BigCommerce application from the list and click on it.



• Enter the following values in the respective fields.




Display Name [Required]	BigCommerce (According to your choice)
Redirect-URL [Required]	Refer to the Note section below to get the Redirect URL.
Client ID	Copy from the downloaded file in Step 1
Client Secret	Copy from the downloaded file in Step 1
Access Token	Copy from the downloaded file in Step 1
Description	According to your choice

Note: Your Redirect URL should be: <Storefront URL>/login/token/
For Example: https://xyz.bigcommerce.com/login/token/


To find your Storefront URL: Go to Channels >> Storefronts. Copy the URL listed for your store.






• Now click on Next and go to Advanced tab.




Subject	E-Mail Address.
Signature Algorithm	HS256
Logout URL	Copy the storefront URL as mentioned above and append /login.php?action=logout

• Click Next to go to the Login Options tab.




Primary Identity Provider	The identity source against which user will be authenticated
Force Authentication	Enable if you want user to authenticate even if the user has a session
Enable User Mapping	Enable if you are sending the logged-in user from this app in the response

• Click on the Save.
• For Attribute Mapping, go to the Attributes tab and select Add Attribute.
• The first three attributes will be hard-coded values

  Attribute Name	Attribute Type	Attribute Value
  store_hash	Custom Attribute Value	Refer to Step 1 above.
  redirect_to	Custom Attribute Value	Endpoint where you wish to redirect the user to after sso. [Homepage or account page e.g. /account.php]
  operation	Custom Profile Attribute	customer_login
  first_name	External Idp Attribute	first_name
  last_name	External Idp Attribute	last_name
  email	External Idp Attribute	email




• Click on the Next button.
• Navigate to Policies tab.
• Click on Assign Group button.



• On the Assign Group section.
• Choose the DEFAULT group.
• Click on the Next button.



• Assign the policies to the group. Here, you can choose the primary authentication method for users. From the dropdown under First Factor, select Password.



• Click on Save.
• Go to Endpoints tab.
• You will find the SSO URL to authenticate.



• Copy the SSO URL and open it in an incognito/private window.
• You’ll be redirected to your IDP for login, and after logging in successfully, you’ll be taken back to your store as a logged-in user.

3. Configure Your User Directory (Optional)

miniOrange provides user authentication from various external sources, which can be Directories (like ADFS, Microsoft Active Directory, Microsoft Entra ID, OpenLDAP, Google, AWS Cognito, etc), Identity Providers (like Okta, Shibboleth, Ping, OneLogin, KeyCloak), Databases (like MySQL, MariaDB, PostgreSQL), and many more. You can configure your existing directory/user store or add users in miniOrange.

• Set up miniOrange as IDP
• Set up External IDP

• To add your users in miniOrange there are 2 ways:
• Create User in miniOrange
• Bulk Upload Users

1. Create User in miniOrange

• Click on Users >> User List >> Add User.



• Here, fill the user details without the password and then click on the Create User button.



• After successful user creation a notification message "An end user is added successfully" will be displayed at the top of the dashboard.



• Click on Onboarding Status tab.
• Check the email with the registered email ID, and select the action Send Activation Mail with Password Reset Link from the Select Action dropdown list, and then click on the Apply button.



• Now, open your email ID. Open the mail you received from miniOrange and then click on the link to set your account password.
• On the next screen, enter the password and confirm the password, and then click on the Single Sign-On (SSO) reset password button.



• Now, you can log in into miniOrange account by entering your credentials.

2. Bulk Upload Users in miniOrange via Uploading CSV File

• Navigate to Users >> User List. Click on Add User button.



• In Bulk User Registration, Download sample csv format from our console and edit this CSV file according to the instructions.



• To bulk upload users, choose the file, make sure it is in a comma separated .csv file format, then click on Upload.



• After uploading the CSV file successfully, you will see a success message with a link.
• Click on that link you will see a list of users to send activation mail. Select users to send activation mail and click on Send Activation Mail. An activation email will be sent to the selected users.

miniOrange integrates with various external user sources such as directories, identity providers, and more.

• Entra ID
• Okta
• Auth0
• AWS Cognito

Not able to find your IdP or Need help setting it up?

Contact us or email us at idpsupport@xecurify.com and we'll help you setting it up in no time.

4. Syncing Address, Form, and Custom Attribute Fields to BigCommerce (Optional)

To synchronize address, custom attributes, and form fields from the Identity Provider (IDP) to BigCommerce, the following details must be configured:

Address Fields

To successfully sync customer address information, the following attributes are required:

• first_name
• last_name
• address1
• city
• country_code

• miniOrange as IDP
• ExternaI Identity Provider

In the below diagram, we are using miniOrange as the IDP.

• Before syncing these fields to BigCommerce, you must first create the corresponding attributes in the miniOrange user profile. These attributes will then be mapped and synced to BigCommerce.



• Then we need to configure the attribute mapping in the application.

  Attribute Name	Attribute Type	Value
  addresses.first_name	First Name	-
  addresses.last_name	Last Name	-
  addresses.address1	Custom Profile Attribute	address1
  addresses.city	Custom Profile Attribute	city
  addresses.state_or_province	Custom Profile Attribute	state/province
  addresses.country_code	Custom Profile Attribute	country
  addresses.postal_code	Custom Profile Attribute	postal_code





Note: When sending the country value, always use the country code (e.g., US, IN). If you pass the full country name such as “United States”, the value will not be updated — only country codes are supported for correct mapping.

While syncing address fields, ensure that the city, state, and country values you provide are valid options supported by BigCommerce and exist in their respective dropdown lists.



• Now, after completing SSO, go to your BigCommerce dashboard. From the sidebar, click on Customers.
• You will see the list of all customers. Search for the specific user and click on their name.
• Next, open the Customer Address Book section — this is where you will be able to view the customer’s address details.

For the Sign up form fields:

• In BigCommerce, the following form fields are available. We need to configure the corresponding attribute mappings in the application to ensure these fields are correctly synced to BigCommerce.



• Then we need to configure the attribute mapping in the application.

  Attribute Name	Attribute Type	Value
  addresses.first_name	First Name	-
  addresses.last_name	Last Name	-
  addresses.address1	Custom Profile Attribute	address1
  addresses.city	Custom Profile Attribute	city
  addresses.state_or_province	Custom Profile Attribute	state/province
  addresses.country_code	Custom Profile Attribute	country
  addresses.postal_code	Custom Profile Attribute	postal_code
  form_fields.name.0	Custom Attribute Value	Law School
  form_fields.value.0	Custom Attribute Value	XYZ
  form_fields.name.1	Custom Attribute Value	Bar Exam State
  form_fields.value.1	Custom Attribute Value	Arizona
  form_fields.name.2	Custom Attribute Value	Bar Exam Date
  form_fields.value.2	Custom Attribute Value	31-12-2025
  form_fields.name.3	Custom Attribute Value	Estimated Graduation Month
  form_fields.value.3	Custom Attribute Value	January
  form_fields.name.4	Custom Attribute Value	Estimated Graduation Year
  form_fields.value.4	Custom Attribute Value	2025




• After completing SSO, go to your BigCommerce dashboard.
• From the left sidebar, click on Customers.
• You will now see the list of all customers.
• Search for the specific user and click on their name.
• The customer profile will open — scroll down to the Customer Details section.
• Here, you will see the signup form fields, where you can view all the customer-submitted form-field details.

For the Attribute Fields

• In BigCommerce, the following attribute fields are available. We need to configure the corresponding attribute mappings in the application to ensure these fields are correctly synced to BigCommerce.



• Then we need to configure the attribute mapping in the application.

  Attribute Name	Attribute Type	Value
  color	Custom Profile Attribute	blue
  customer_address	Custom Profile Attribute	MG road
  customer_mobile	Custom Profile Attribute	+911234567890
  DOB	Custom Profile Attribute	2002-01-01
  attribute_string 01	Custom Profile Attribute	testing




• After completing SSO, go to your BigCommerce dashboard.
• From the left sidebar, click on Customers.
• You will now see the list of all customers.
• Search for the specific user and click on their name.
• The customer profile will open — scroll down to the Customer Details section.
• Here, you will see the attribute fields, where you can view all the customer-submitted form-field details.

NOTE: Update customer profile during sso

• Go to the BigCommerce application you have configured in miniOrange.
• Open the Advanced tab.
• Scroll to the bottom of the page.
• Enable the checkbox Update Customer Profile During SSO.

For ExternaI Identity Provider

• Before syncing these fields to BigCommerce, you must first create the corresponding attributes in your external IDP. These attributes will then be mapped and synced to BigCommerce.
• Then we need to configure the attribute mapping in the application.
• For Address field:

  Attribute Name	Attribute Type	Value
  addresses.first_name	External Idp Attribute	first_name
  addresses.last_name	External Idp Attribute	last_name
  addresses.address1	External Idp Attribute	street1
  addresses.city	External Idp Attribute	city
  addresses.state_or_province	External Idp Attribute	state
  addresses.country_code	External Idp Attribute	country
  addresses.postal_code	External Idp Attribute	zipcode





Note: When sending the country value, always use the country code (e.g., US, IN). If you pass the full country name such as “United States”, the value will not be updated — only country codes are supported for correct mapping.

While syncing address fields, ensure that the city, state, and country values you provide are valid options supported by BigCommerce and exist in their respective dropdown lists.



• Now, after completing SSO, go to your BigCommerce dashboard. From the sidebar, click on Customers.
• You will see the list of all customers. Search for the specific user and click on their name.
• Next, open the Customer Address Book section — this is where you will be able to view the customer’s address details.




For the Sign up form fields:

• In BigCommerce, the following form fields are available. We need to configure the corresponding attribute mappings in the application to ensure these fields are correctly synced to BigCommerce.




Attribute Name	Attribute Type	Value
form_fields.name.0	Custom Attribute Value	Law School
form_fields.value.0	External Idp Attribute	law_school
form_fields.name.1	Custom Attribute Value	Bar Exam State
form_fields.value.1	External Idp Attribute	bar_exam_state
form_fields.name.2	Custom Attribute Value	Bar Exam Date
form_fields.value.2	External Idp Attribute	bar_exam_date
form_fields.name.3	Custom Attribute Value	Estimated Graduation Month
form_fields.value.3	External Idp Attribute	month
form_fields.name.4	Custom Attribute Value	Estimated Graduation Year
form_fields.value.4	External Idp Attribute	year




• After completing SSO, go to your BigCommerce dashboard.
• From the left sidebar, click on Customers.
• You will now see the list of all customers.
• Search for the specific user and click on their name.
• The customer profile will open — scroll down to the Customer Details section.
• Here, you will see the signup form fields, where you can view all the customer-submitted form-field details.




For Custom Attribute Fields

• In BigCommerce, the following attribute fields are available. We need to configure the corresponding attribute mappings in the application to ensure these fields are correctly synced to BigCommerce.



• Then we need to configure the attribute mapping in the application.

  Attribute Name	Attribute Type	Value
  color	External Idp Attribute	color
  customer_address	External Idp Attribute	address
  customer_mobile	External Idp Attribute	mobile_number
  DOB	External Idp Attribute	birth_date
  attribute_string 01	External Idp Attribute	string




• After completing SSO, go to your BigCommerce dashboard.
• From the left sidebar, click on Customers.
• You will now see the list of all customers.
• Search for the specific user and click on their name.
• The customer profile will open — scroll down to the Customer Details section.
• Here, you will see the attribute fields, where you can view all the customer-submitted form-field details.




NOTE: Update customer profile during sso

• Go to the BigCommerce application you have configured in miniOrange.
• Open the Advanced tab.
• Scroll to the bottom of the page.
• Enable the checkbox Update Customer Profile During SSO.

5. Test SSO Configuration

• To test the SSO configuration, you will need the SSO Initiating URL.
• Edit the JWT App you just created.
• Go to the Endpoints tab and copy the SSO URL.
• Open an incognito/private browser window, paste the SSO URL, and hit enter.
• You should be redirected to your Identity Provider (IdP).
• After a successful login, you will be redirected back to your BigCommerce store as a logged-in user.

  Note: If you face any issues while testing, [Click Here to troubleshoot].

• Once successful, the next step is to add the SSO URL to your storefront login links.
• Log in to BigCommerce as an Admin.
• Navigate to Channel Manager → Edit Storefront Settings → Themes → Advanced → Edit Theme Files.
• A new window with theme files will open.

The steps below apply to the Cornerstone theme. If you are using a different theme, adjust the changes accordingly.

• For Desktop View:
• Navigate to Templates → Components → Common → navigation.html.
• Replace the existing login link: href="{{urls.auth.login}}" With: href="<SSO_URL>"
• Save and apply the file.
• For Mobile/Tablet View:
• Navigate to Templates → Components → Common → navigation-menu.html.
• Replace the existing login link: href="{{urls.auth.login}}" with: href="<SSO_URL>"
• Save and apply the file.
• Finally, go to your storefront URL, click on Login, and verify that SSO is working as expected.

6. Configure SLO in BigCommerce

• Download the script to initiate SLO in BigCommerce.
• In your BigCommerce dashboard, navigate to Channels.
• Under the Storefronts section, find your storefront URL and click on Scripts.



• Click Create a Script and add the downloaded script in the Header section of the page.
• Enable the settings as shown in the image below.





• A text editor will open where you can paste the downloaded script.

External References

• Know more about Single-Sign On (SSO)
• What is Customer Identity and Access Management (CIAM)?
• Read more about "What is JWT" & how does it work?
• Connect easily with any external identity source like Azure AD, Auth0, etc.
• Setup SSO for multiple BigCommerce storefronts
• BigCommerce Dynamics 365 Integration
• BigCommerce NetSuite Integration

Frequently Asked Questions