Single Sign-On (SSO) - Settings

What you'll need

A few things to have ready before you begin:

• Access to your identity provider's admin panel, such as Azure AD, Google Workspace or Okta
• The SAML metadata URL or XML from your identity provider
• SSO enabled on your Abicart account by Abicart Support
• Admin access to your Abicart back office

Setting up SSO in four steps

1 Create your SSO configuration in Abicart Admin

Go to Settings > Single Sign-On (SSO) in your Abicart admin panel and add a new configuration. Give it a name, for example your company name, and save it.

Saving generates Abicart's metadata URL for this configuration. You'll find it on the same page, labelled Abicart Metadata URL (URL till Abicart-metadata). Copy it directly. You do not need to type anything or enter the IDs manually.

2 Create a SAML application in your identity provider

In your identity provider, for example Microsoft Azure AD, create a new SAML application for your webshop and paste in the Abicart metadata URL you copied in step 1.

3 Paste your identity provider's metadata back into Abicart

Back on the SSO configuration page from step 1, fill in the following:

Default mapping for Microsoft Azure AD:

{
  "sub":         "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress",
  "name":        "http://schemas.microsoft.com/identity/claims/displayname",
  "family_name": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname",
  "given_name":  "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname",
  "email":       "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"
}

The settings that matter most:

4 Save and test

Click + Update (+ Uppdatera) to save, then click Test to try the login flow. If it does not work immediately, double-check that the metadata URLs are correct on both sides and that the attribute mapping matches the claims sent by your identity provider.

Using SSO in a multistore setup

Each webshop has its own SSO configuration. This means you can use different login experiences for different shops within the same multistore setup.

• Shop A can require SSO for all users.
• Shop B can offer both SSO and password login.
• Shop C can continue using standard password login only.

Only the webshop where an SSO configuration or automatic redirect is enabled is affected. Other shops continue using their own login settings.

Choose your login experience

There are three ways to configure the login experience, from the most flexible option to the most restricted. Choose the setup that best matches how your customers should sign in.

Customer groups by SSO configuration

If multiple SSO configurations are connected to the same webshop, each configuration can automatically assign customers to a different customer group. This makes it easier for several companies to share one webshop while receiving different pricing, assortments or other customer-group-specific settings.

For example:

• Customers signing in through the Company A SSO configuration can be assigned to A Staff.
• Customers signing in through the Company B SSO configuration can be assigned to B Staff.
• Customers signing in through the Company C SSO configuration can be assigned to C Staff.

Once configured, the customer group is assigned automatically when the customer account is created. No manual reassignment is needed.

Available in Admin Each SSO configuration can be linked to its own customer group directly from the SSO settings.

Key URLs

Need help?

Whether you're setting up your first SSO connection, configuring multiple identity providers or planning a multistore solution, we're happy to help.

Contact Abicart Support and we'll guide you through the setup.