Shopify组织的SCIM用户治理
组织的 SCIM 用户治理
Shopify 组织后台仅适用于 Shopify Plus 套餐 。。。。。。Shopify Plus
为组织验证域名并设置 SAML 身份验证后，，，，，您可以天生 SCIM API 令牌 。。。。。。
本页相关主题
功效
要求
设置 SCIM 用户治理
删除 SCIM 集成
限制
功效
通过向您的身份信息效劳提供商提供 SCIM API 令牌，，，，，您可以通过您的身份信息提供商执行以下操作：
建设用户
停用用户
要求
在设置 SCIM 用户治理之前，，，，，您需要验证您的域名并建设 SAML 设置 。。。。。。您只能治理与已验证的域名关联的用户 。。。。。。
设置 SCIM 用户治理
在您的 Shopify 组织后台中，，，，，前往用户 > 清静 。。。。。。
在 SCIM 集成部分中，，，，，点击天生 API 令牌 。。。。。。
点击复制，，，，，将天生的令牌复制到剪贴板 。。。。。。
向您的身份信息效劳提供商提供令牌 。。。。。。添加令牌的历程取决于您使用的身份信息效劳提供商 。。。。。。
在 Okta 中完成 SCIM 设置
翻开 Shopify Plus 应用 。。。。。。
点击登录选项卡 。。。。。。
将应用程序用户名名堂设置为电子邮件 。。。。。。
单击生涯 。。。。。。
点击预配选项卡 。。。。。。
点击设置 API 集成 。。。。。。
选中启用 API 集成，，，，，然后在提供的字段中粘贴 API 令牌 。。。。。。
点击测试 API 凭证 。。。。。。若是遇到过失，，，，，请验证您是否从 Shopify Plus 后台准确复制了 API 令牌 。。。。。。若是继续遇到过失，，，，，请联系 Shopify Plus 客服 。。。。。。
单击生涯 。。。。。。
在向您的身份效劳提供商添加 API 令牌后，，，，，您可以通过该效劳添加或删除用户 。。。。。。凭证用户在 Shopify 和您的身份效劳提供商中的用户状态，，，，，这可能会更改他们登录 Shopify 的方法 。。。。。。
| 用户状态 | 在 Shopify 中爆发的影响 |
|---|---|
| 您的组织中已保存的用户 | 若是您在标识效劳提供商中添加某位用户，，，，，则在知足以下所有条件时，，，，，该用户需要使用 SAML 身份验证登录：
|
| 用户保存于 Shopify 中，，，，，但不保存于您的组织中 | 若是您在标识效劳提供商中添加某位用户，，，，，则还会将该用户添加到您的组织中，，，，，并且在知足以下所有条件时，，，，，该用户需要使用 SAML 身份验证登录：
|
| Shopify 中不保存的用户 | 若是您在标识效劳提供商中添加某位用户，，，，，则还会将该用户添加到您的组织中，，，，，并且在知足以下所有条件时，，，，，该用户需要使用 SAML 身份验证登录：
|
添加 API 令牌后，，，，，当您通过身份信息提供商或组织后台添加之前不保存于 Shopify 中的新用户时，，，，，您的新用户将被设为待处置惩罚状态 。。。。。。若是您的用户需要使用 SAML 举行登录，，，，，那么在使用您的身份信息提供商登录前，，，，，他们将坚持待处置惩罚状态 。。。。。。
删除 SCIM 集成
若是您不再需要 SCIM 集成，，，，，则可以将其删除 。。。。。。此操作无法作废 。。。。。。若是您需要重新激活集成，，，，，则需要天生新的 API 令牌 。。。。。。
办法：
在您的 Shopify 组织后台中，，，，，前往用户 > 清静 。。。。。。
在 SCIM 集成部分中，，，，，点击 API 令牌旁边的 ...
点击删除令牌 。。。。。。
限制
无法通过标识效劳提供商删除店主和组织所有者 。。。。。。必需先转让这两种类型的所有权，，，，，然后才可删除此类用户 。。。。。。若是您需要更改店主，，，，，则可以从 Shopify 后台完成此操作 。。。。。。若是您需要更改组织所有者，，，，，请联系 Shopify Plus 支持 。。。。。。
Shopify商户官网原文详情：
SCIM user management for your organization
Shopify Plus
The Shopify organization admin is only available to the Shopify Plus plan.
After you've verified your domain and set up SAML authentication for your organization, you can generate a SCIM API token.
On this page
Features
Requirements
Configure SCIM user management
Removing SCIM integration
Restrictions
Features
Providing the SCIM API token to your identity service provider allows you to take the following actions through your identity provider:
Create users
Deactivate users
Requirements
Before you set up SCIM user management, you need to verify your domain and create a SAML configuration. You can only manage users who are associated with a domain that you've verified.
Configure SCIM user management
In your Shopify organization admin, go to Users > Security.
In the SCIM integration section, click Generate API token.
Click Copy to copy the generated token to your clipboard.
Provide the token to your identity service provider. The procedure for adding the token depends on which identity service provider you use.
Complete SCIM configuration in Okta
Open the Shopify Plus app.
Click the Sign On tab.
Set the Application username format to Email.
Click Save.
Click the Provisioning tab.
Click Configure API Integration.
Check Enable API integration, and then paste the API token in the provided field.
Click Test API Credentials. If you encounter an error, then verify that you have correctly copied the API token from your Shopify Plus admin. If you continue to encounter errors, then contact Shopify Plus support.
Click Save.
After your API token has been added to your identity service provider, you can add or remove users through that service. Depending on the status of that user within Shopify and your identity service provider, this can change how they log in to Shopify.
User status Effect within Shopify User already exists in your organization If you add a user in your identity service provider, then the user is required to log in using SAML authentication if all the following are true: The effect of removing a user's access through your identity provider depends on their user status. If you remove an active user's access to Shopify using your identity service provider, then they are suspended in your organization. If you permanently delete a user using your identity service provider, then they might be deleted from your organization, depending on your identity provider setup.
the user already exists in Shopify
the user already exists in your organization
you use Specific users enforcement
User exists in Shopify, but not your organization If you add a user in your identity service provider, then the user is added to your organization and required to log in using SAML authentication if all the following are true:
the user already exists in Shopify
the user does not exist in your specific organization
you use Required or Specific users enforcement
User does not exist in Shopify If you add a user in your identity service provider, then the user is added to your organization and required to log in using SAML authentication if all the following are true: When the user signs in to the Shopify organization admin for the first time, then that user must do so through the identity provider, not through the Shopify login page.
the user does not exist in Shopify
you use Required or Specific users enforcement
After adding the API token, when you add a new user who did not previously exist in Shopify either through your identity provider or the organization admin, your new user is set to pending status. If your user is required to log in using SAML, then they will remain in pending status until they log in using your identity provider.
Removing SCIM integration
If you no longer require a SCIM integration, then you can remove it. This action can't be undone. If you need to reactivate your integration, then you need to generate a new API token.
Steps:
In your Shopify organization admin, go to Users > Security.
In the SCIM integration section, click ... beside the API token.
Click Delete token.
Restrictions
Store owners and organization owners can't be removed through an identity service provider. Both types of ownership must be transferred before the user can be removed. If you need to change the store owner, then you can do so from your Shopify admin. If you need to change the organization owner, then contact Shopify Plus support.
文章内容泉源：Shopify商户官方网站