I am thinking about it the whole week and could not grasp all the facts, especially at Shopify end. I asked the questions on their forum, contacted them directly. Nothing.
There are 2 main questions I am looking to get answers to:
- Can Shopify Plus acts as an Identity Service provider (physically store the users without using 3r party ISP) and allow other applications (including ours) to authenticate via SAML?
- Can Shopify (Plus or Non-Plus) authenticate users using Shopify accounts. Something like Shopify Social Connection. It appears so, according to Auth0 offering: https://auth0.com/docs/connections/social/shopify#set-up-app-in-shopify. This would require that our app is installed in Shopify as "Shopify Custom App"
But I could not find any article about Shopify authenticating (installed app users), not apps via Oauth.