Better docs for SAML IdP

we've gone through some back and forth while setting up SAML SSO for Zoho One with Azure AD (MS 365).

it is quite a common case that enterprises want to use their existing MS auth instead of Zoho password and I think the docs would benefit from some improvements.

1// there is a detailed guide about how to setup SAML in Zoho Accounts: https://help.zoho.com/portal/en/kb/accounts/manage-your-organization/saml/articles/access-zoho-via-azure#A_Create_an_app_in_Azure

- while this page is a nice and detailed guide, for One admins it's generally better to follow the second method detailed in...

2// a separate documentation how to set up SAML in Zoho One in which case it's named custom IdP https://help.zoho.com/portal/en/kb/one/admin-guide/custom-authentication/setting-up-custom-authentication-with-popular-idps/articles/zohoone-customauthentication

- this method is more flexible as one can enable SAML for individual users or groups.

3// MS hosted docs: https://learn.microsoft.com/en-us/azure/active-directory/saas-apps/zohoone-tutorial

suggestions:

- the first two documentation sources should be interlinked

- it's even easy / possible to lock yourself out when following the steps in 1// as it instantly enables SAML for everyone in the org. if you want to disable SAML afterwards you'll have to go through the (new) SAML flow. if there is something incorrect in your config (e. g. SAML certificate) all users end up being locked out including the super admin which ends up in a loop if wanting to disable SAML. Zoho might want to rethink this case from a product perspective.

- the information on MS hosted docs is slightly different in creating the SSO App in Azure, any chance to unify this?

- specifically for Azure, according to the docs site the SAML identifier (Entity ID) reflects the data center (one.zoho.com, one.zoho.eu, one.zoho.in) etc. in my exprience this is not true and it's always one.zoho.com regardless of the DC.

hope this helps.