We have released an add-on for wholesale stores: company sign-in and registration through SberBusiness ID.
A company fills in more than anyone at registration — the name, the tax numbers, the address, the phone, the contact person. Part of the customers leave at that step, and for those who finish a manager later checks the details against the bank statement. The add-on removes the form: a representative of the company presses “Sign in with SberBusiness ID”, confirms the sign-in in SberBusiness and comes back to the store already signed in.
What comes from the bank. The company name, its tax numbers, the e-mail address and the phone. The store creates the customer from that data or links SberBusiness ID to an existing account — no duplicate appears and the order history stays where it was.
Where the button goes. On the sign-in page, in the sign-in pop-up from the header and on the registration page. No theme templates to edit; a setting puts the button first among the third-party sign-ins.
About security. The add-on handles the keys that issue tokens on behalf of the store, so version 1.1 closed everything the code review found: the secrets are masked in the log, the gateway certificate is verified, the one-time state and nonce are checked on the callback, the ID token signature is verified against the Sber key set, and the Client Secret and the certificate password are stored encrypted with a key that belongs to the installation.
What the store needs: CS-Cart or Multi-Vendor 4.17.1 or later, an HTTPS storefront and the SberBusiness ID credentials — a Client ID, a Client Secret and a TLS certificate. The store obtains them in its SberBusiness account, for its own legal entity and domain; the manual walks through it step by step.
What the add-on does not do: it does not replace the usual e-mail and password sign-in (the button stands next to it) and it does not touch bank statements or the current account — this is sign-in and registration only.
The add-on on Marketplace: All developers :: Cart-Power
The live demo and the documentation are linked on the same page.