Single sign-on for business customers

What Is Business SSO?

Business single sign-on lets the buyers at a B2B company sign in to your storefront through your own OpenID Connect (OIDC) identity provider, instead of creating a separate Cartly password. The whole team shares one login, and you manage access from your identity provider — add or remove a teammate there and their storefront access follows.

Setting Up SSO for a Company

1. Go to Admin → Companies and open the company
2. On the Details tab, set the company's Company ID (lowercase, url-safe) — buyers use this to sign in
3. Switch to the SSO tab and enter your identity provider's Issuer URL, Client ID, and Client Secret
4. Toggle Enable SSO for this company on and save

Registering the Callback with Your Identity Provider

Add the following URL to your identity provider's allowed redirect URLs before enabling SSO:

https://cartly.pro/storefront/v1/sso/callback

How Buyers Sign In

1. On the storefront login page, the buyer clicks Sign in with SSO
2. They enter their company's Company ID
3. They are redirected to your identity provider to authenticate, then returned to your storefront signed in

Notes

• SSO is configured per company — different companies can use different identity providers, or none at all
• Turning SSO off does not delete your configuration; you can re-enable it later without re-entering your credentials
• Saving the SSO tab without a new Client Secret keeps the existing one unchanged