Redirect a customer into their Storefront account
If a customer is already logged in on your own platform, you shouldn't have to make them log in again separately to manage their domain on Storefront. You can generate a one-time link that drops them directly into their Storefront account, fully authenticated, with a single API call.
This combines customer creation with the SSO URL endpoint.
How it works
- Your customer authenticates on your own platform, as usual.
- From your backend, call the SSO URL endpoint for that customer's Storefront ID:
POST /v1/customer/{customer_id}/sso_url- Storefront returns a ready-to-use login URL and its expiry time:
{
"url": "https://yourstorefront.com/site/validate?token=...&queue=continue",
"expires_at": "2026-08-11T17:15:36.129392Z"
}- Redirect the customer's browser to that URL. No further request is needed — it already contains everything required to log them in.
What to know before using this
The link is short-lived and single-useThe URL expires 15 minutes after it's generated, and can only be used once — whether or not the login succeeds. Generate it immediately before redirecting the customer; don't generate it in advance or store it for later use.
This bypasses two-factor authenticationBecause the customer already authenticated on your platform, a token login does not prompt for any 2FA configured on their Storefront account. Only generate this URL immediately before redirecting an already-authenticated customer.
Every login completed this way is recorded in your Storefront event log, so you can audit how often it's used.
A good use case
A "Manage My Domains" button inside your own customer dashboard is the classic use for this — the customer clicks it, and lands directly on their domain list in Storefront, with no second login screen in between.
Related articles
Updated 6 days ago