Skip to content
Menu

Popular
Install on Shopify

How to Set Up Claude Managed Authorization

Shopify API ·

With Claude managed authorization, Claude connects the members of your Claude organization to Simple Affiliate for you. Each person uses the Simple Affiliate connector in Claude without a sign-in step and without an approval in the Shopify Admin.

How Claude Managed Authorization Works

Your Claude organization has its own issuer URL. You enter this URL in Simple Affiliate, and Simple Affiliate trusts only that organization for your store. When a member uses the connector, Claude sends Simple Affiliate a signed statement with the email of their Claude account.

  1. Simple Affiliate checks that the statement comes from your Claude organization and is for your store.
  2. Simple Affiliate finds the staff member of your store whose verified Shopify email is the same as the Claude email.
  3. The connection acts as that staff member, on your store only. It works the same as a connection that the person makes with the usual sign-in.

Before You Start

  • Claude plan: Your Claude organization is on a Team or Enterprise plan.
  • Claude role: You are an Owner or a Primary Owner of the Claude organization, or you work with one. Claude shows the managed authorization setup only to these roles.
  • Simple Affiliate: The app is installed on your store, and you can open Settings. It works on every plan.
  • Same email: Each person uses the same email address for their Claude account and for their Shopify staff account. Shopify must show that email as verified.
  • Identity source: Simple Affiliate accepts the Claude-issued identity source only. A Claude organization that signs in through an identity provider, such as Okta, cannot use the IdP-managed source with Simple Affiliate.

How to Set Up Managed Authorization

Do steps 1 to 3 in Claude, steps 4 to 6 in Simple Affiliate, and steps 7 to 9 in Claude again.

  1. In Claude, add the Simple Affiliate connector for your organization. If the connector is not in the Claude directory yet, add a custom connector with the server URL https://mcp.simple-affiliate.com/mcp.
  2. Open the connector and click its Configuration tab. On the Managed authorization row, click Set up. Under Identity source, choose Claude-issued.
  3. Copy the Issuer URL. It starts with https://identity.anthropic.com/issuers/.
  4. In Simple Affiliate, open Settings > Integrations. In AI assistant connections, find Claude managed authorization.
  5. Paste the URL in Claude issuer URL and click Turn on.
  6. Copy the Tenant ID that Simple Affiliate shows. It is the address of your store, for example your-store.myshopify.com.
  7. In Claude, paste it in Tenant ID (optional). Simple Affiliate requires the tenant ID, and refuses a connection without it.
  8. Open Simple Affiliate one time in your Shopify Admin. Then, in Claude, click Run test under Connection status.
  9. When each step of the test shows a pass, click Continue. Choose the roles that connect through managed authorization, and turn it on.

The test makes a connection as you. If it fails, Claude shows the reason. See Troubleshooting. To test again later, click Test connection on the Managed authorization row.

What Each Staff Member Does

  1. Open Simple Affiliate in the Shopify Admin one time after managed authorization is on.
  2. In Claude, turn on the Simple Affiliate connector in a chat and ask a question. Claude connects with no sign-in step.

Simple Affiliate records the verified email of a staff member when that person opens the app. A record is valid for 90 days. Each person opens Simple Affiliate at least one time every 90 days to keep the connection.

Troubleshooting

  • "No staff member of the store has this verified email": The person did not open Simple Affiliate after you turned managed authorization on, or did not open it in the last 90 days. Or their Claude email is not the same as their Shopify staff email, or Shopify did not verify it. Open Simple Affiliate, then try again.
  • "The assertion has no tenant ID": Enter the Tenant ID from Simple Affiliate in Tenant ID (optional) in Claude.
  • "No store with this tenant ID": The issuer URL in Simple Affiliate is not the one that Claude shows, or the tenant ID is for another store. Copy both values again.
  • "The store revoked this connection": Someone clicked Revoke on this connection. It starts again when the person opens Simple Affiliate a day or more after their last visit.

Important Rules to Remember

  • ⚠️ One Claude organization per store: Your store trusts one issuer URL. If you enter a different URL, Simple Affiliate ends the connections of the earlier organization. Each staff member then opens Simple Affiliate again.
  • Turn off: Click Turn off in Claude managed authorization. This ends every managed connection and deletes the recorded staff emails. Connections that people made with the usual sign-in stay.
  • People who leave: When you remove a person from your Claude organization, Claude stops connecting them. Their current access ends within one hour. To end it at once, click Revoke next to their connection.
  • Same rules as a sign-in: The Confirm card, the plan limits and the rule that an assistant cannot send payouts all apply. See How to Connect Claude or ChatGPT to Simple Affiliate.
  • Private data: Simple Affiliate keeps the verified email of each staff member who opens the app while managed authorization is on. It uses the email only to find the person, and deletes it when you turn managed authorization off or uninstall the app.

Related articles

Simple to install. Simpler to run.

Install on Your Shopify Store