Security Enhancements | Migrate to the Updated Policies

Hello everyone,

Zoho Directory's security policies have been updated and reorganized into three new policies with features that enhance the overall organization security. These policies provide a stronger and more secure sign-in methods and improve the user authentication experience.

Earlier, security policies comprised four dedicated components: Password Policy, Multi-Factor Authentication (MFA), Allowed IPs, and Advanced Settings. Based on these components, each group was assigned a policy that determined their sign-in process. Depending on their roles and responsibilities, the sign-in method varied and upon successful authentication, users were granted access to Zoho Directory.

With the latest update, the policies are divided into three parts: Conditional Access Policies, Routing Policies, and Security Policies.

1. Routing Policies acts as an initial check when a user signs in. 
   
2. Conditional Access Policies determines whether the user's access should be allowed or denied based on the predefined criteria.
   
3. Security Policies provide you with a dedicated Password Policy and Session Settings.
   

Additionally, Custom Authentication has been renamed and is now a part of Routing Policies.

New Policies:

Conditional Access Policies | Routing Policies | Security Policies

To understand how your existing policies are handled and mapped to the new policies during the migration process, click here.

Before migrating to the updated policies, quickly review how the policies are changed.

Existing Policies	Updated Policies
Password Policy	Security Policies Password Policy is a part of Security Policy. Learn more.
Multi-Factor Authentication (MFA)	Conditional Access Policies Multi-Factor Authentication (MFA) is a part of Conditional Access Policies. MFA acts as an Action (Allow with MFA) under this policy. Learn more.
Allowed IPs	Conditional Access Policies Allowed IPs is a part of Conditional Access Policies. It acts as a condition (IP address) under the policy. Learn more.
Advanced Settings 1. WEB SESSION MANAGEMENT 2. LOCK PERIOD SETTINGS	1. Routing Policies Session Lifetime and Idle Session Timeout are a part of Session Settings under Routing Policies. Learn more. 2. Security Policies Concurrent Sessions, and Lock Period Settings are a part of Advanced Settings under Security Policies. Learn more.
Custom Authentication	Routing Policies This section is renamed as Identity Providers and can be enabled via Routing Policy. Learn more.

How to Migrate?

Existing users with pre-configured policies will come across the Migration Page, which guides them through reviewing, resolving the conflicts and adopting the new policies. On this page, you will be required to complete the steps before migrating.

1. Demo: Watch a quick demo to understand what’s changed and updated.
   
2. Read the Changes: View a detailed document that outlines all the updates.
   
3. New Admin Role: Configure the new admin role to replace the existing Helpdesk Admin role as it will no longer have permission to manage security operations.
   Note: This section is displayed only if at least one user is assigned to the Helpdesk Admin role.
   
4. Custom Admin Role: Review the changes in the custom roles. 
   
   Note: This section is displayed only if a custom security role has been created and assigned to a user.
5. Sandbox Mode: Preview the updated policies in sandbox mode before migrating

After completing these steps, you can proceed with migrating to the updated security policies.

FAQs

1. What happens if I don't migrate? 
   You can continue using the existing security policies (old version) until you migrate to the updated policies.
   
2. What will happen to my existing policies? 
   Your existing security policy configurations will be migrated to the new policy framework. To understand how your existing policy setup is mapped to the updated policies, click here.
   
3. Who can perform this migration? 
   Only the Organization Owner or Organization Admin can perform the migration.
   

Regards,

The Zoho Directory Team.

• Topic Participants

• Reena Rai N

  

• Recent Topics

• Free Webinar: An exclusive live Q&A session with the Zoho Vault team

  As 2020 draws to an end, we're closing out a year that has seen drastic changes all around the world. Many businesses have adopted cloud solutions and a remote work culture for the first time, and this has given rise to newer cyber risks and threats that

• Why passwordless authentication should be your top security project for 2021

  Hello users! We know that nobody likes to remember passwords, yet they form an indispensable part of our lives. Many of us working with any kind of technology today manage numerous passwords for personal and business accounts. With the widespread adoption

• Free Webinar: See why Zoho Vault is the best alternative to LastPass

  When LastPass was acquired by LogMeIn in Oct 2015, we expressed our genuine concern about how this would change the LastPass business model and how customer trust would transfer from one company to another. As we suspected, LastPass doubled their pricing

• Managing cyber threats when working remotely | A Customer Survey Report

  The nearly universal adoption of remote work has changed the way businesses function. Globally, enterprises continue to work to find new ways to make life easier for employees working remotely. However, a commonly cited concern has been the lack of cybersecurity

• World Password Day: 5 interesting facts about passwords

  It's World Password Day: that time of the year when we talk about password hygiene and the importance of safe password management. World Password Day is observed on the first Thursday of every May, and this year, we'd like to talk about some of the most

• Free Webinar: Go passwordless in 2022 with Zoho Vault

  Passwords have long been the preferred authentication method, largely due to their universal appeal. While they're easy for people to use and implement, they're also convenient for hackers to exploit. Reports from 2021 state that weak and stolen passwords

• Myki has announced EOL for its services | Learn why Zoho Vault password manager is the best alternative

  Hello Myki users,   Myki has announced end-of-life for its Teams, MSP, and GUARD services, after being acquired by JumpCloud. In their recent announcement, Myki stated that they will be removing their apps and extensions from the respective stores, turning

• Join our exclusive meetup with Zoho's Real Estate community

  Hey there, The Zoho Vault team is conducting a meetup for all real-estate users from Zoho. During this session, we will be discussing the need for secure password management and how Vault can help you and your clients safely protect passwords and other

• Free webinar: A quick walkthrough of Zoho Vault and major updates in 2023

  Managing passwords is crucial for all businesses. You can securely store, share, and manage passwords effectively from anywhere with Zoho Vault. We have introduced several new features in 2023 to offer the best online experience for our users. Join our

• Free webinar: Why a password manager is a “must-have” for everyone in 2024

  In the past decade, we've witnessed numerous cybersecurity breaches globally, with a significant portion resulting from the "it won't happen to me" mindset. Shockingly, in 2023, 86% of breaches involved weak and stolen passwords. Password hygiene is crucial

• Zoho Vault - Webinars 2023 - Video Recordings and Slide Decks

  Hello, We wanted to offer a consolidated list of Zoho Vault webinar resources from 2023. Therefore, we're putting together a list that includes links to our webinar recordings and slide decks for easy access. Webinar Video recording Slide deck Getting

• Free webinar: ‌Focal point: Building a financial ecosystem with Zoho Vault and Zoho Workplace

  Hi everyone! Cyber threats against the financial sector are escalating. In the last two decades, nearly one-fifth of reported incidents targeted financial institutions, causing $12 billion in direct losses. Cybercriminals are becoming more sophisticated,

• New features in Zoho Vault

  We’re thrilled to introduce a wave of powerful updates in Zoho Vault, designed to enhance security, streamline workflows, and improve your overall experience. Let’s dive into what’s new! Folder creation restrictions Limit who can create folders in your

• Join our World Password and Passkey Day expert Q&A 2025

  Hey everyone! World Password and Passkey Day is almost here, and there's no better time to talk about something we all rely on daily—secure authentication. Did you know that a staggering 60% of hacking-related breaches are tied to weak or stolen passwords?

• Dashlane discontinued its free plan: Here's why Zoho Vault's free plan is worth the switch

  Hey everyone, Dashlane password manager has officially announced that its free plan will be discontinued starting September 16, 2025. This change means that current free users will need to either upgrade to a paid subscription or export their data and

• Introducing SecureForms in Zoho Vault

  Hey everyone, Let’s face it—asking someone to send over a password or other sensitive data is rarely straightforward. You wait. You nudge. You follow up once, twice—maybe more. And when the information finally arrives, it shows up in the worst possible

• Clickjacking: Zoho Vault's Response

  Issue: Password manager browser extensions are found to be vulnerable to clickjacking security vulnerabilities that could allow attackers to steal account credentials, TFA codes, and card details under certain conditions. Reported by: Marek Toth, Independent

• Free webinar: Security that works: Building resilience for the AI-powered workforce

  Hello there, Did you know that more than 51% of organizations worldwide have experienced one or more security breaches, each costing over $1 million in losses or incident response? In today’s threat landscape, simply playing defense is no longer enough.

• Free webinar—Redefining workforce security with Zoho Vault: Passwords, passkeys, and multi-factor authentication

  Hi everyone! Did you know that in Q2 alone, 94 million data records were leaked globally? Behind every breach is a combination of poor password habits, phishing attacks, privilege misuse, and simple human error. The fallout—including reputational damage,

• Fill Colors

  Hello, Just curious, is it possible to manage the Used and standard colors in the fill drop down menu ? I would like to change/edit them is possible to colors I frequently use. Thanks for you reply, Bruce

• Client scripts for Zoho Books ?

  Good day everyone, I am looking for a way to be able to interact with the Quotes and Invoices as they are being created. Think of it like Zoho client script in Zoho CRM. But for the life of me I dont see a way to do this. The issue with having function

• Fillable template with dynamic tables?

  Is there a way to build a fillable template so that users can add rows to a table? To describe what I'm trying to accomplish the table has 3 sections; a header row, some number of rows with custom information, and a summary row with totals. I can't figure

• Invoicing multiple expense items as a single line item

        My client would like me to invoice them for multiple expense items on a single line item on an invoice.  Can this be done?  I know I can import billable expenses to an invoice, but I don't know how to show them as a single line item or have them

• Tables improvement ideas / features

  Heya, I've been using Zoho Tables for a few months now and wanted to post some features that I think will be greatly beneficial for the tool: 1. Ability to delete a record in automation or move a record in automation. - Usecase: I move a record from one

• Announcing offline payment modes for event tickets

  Hello everyone,   Collecting ticket payments from prospective attendees can be a tricky part of event planning. While Zoho Backstage has always allowed you to collect payments online as people buy tickets from your event microsite, we have now enabled

• Gmail is ramping up its email sender policy from November 2025

  Hello marketers, As you may be aware, Gmail introduced a guideline for bulk senders starting February 2024. If not, here's a quick refresher straight from Google: After this policy was announced first in 2023 and soft-implemented in February 2024, we

• Is there a list of Zoho Icons?

  Is there a list of Zoho Icons you can reference: i.e. business-gold is <image marginRight='7px' color='#2A70E7' bgColor='#FFFFFF' width='52px' height='52px' type='icon' value='business-gold' size='24px' cornerRadius='26px' iconType='solid' /> Thanks!

• Item images

  Can we get an "On hover" expanded image for items please ?

• Ability to Create and Manage YouTube Video Chapters in Zoho Social

  Hi Zoho Social Team, How are you? We would like to request an enhancement to Zoho Social that would allow users to create and manage YouTube video chapters directly within the platform. Currently, Zoho Social does not support manually adding chapters

• What happens to my current site SEO if i opt for zoho creator?

  I have an existing website and I need to use Zoho creators for the rapid creation of my webpage creation. Currently, my IT team is creating the web pages, but I am concerned about the SEO of my current website if I shift to zoho will i loose it all?

• Preview Emails with Merge Fields before sending

  Hello, Are there plans to preview an email with merge fields before sending out? Currently, all you see in the preview are the merge field values, but before I send out the email I want to make sure the merge is working. Also, the saved emails only show

• User Filter not selecting All Items

  We are encountering 2 issues when using the user filter. When users are trying to search using the filter option, the OK button is grayed out. Users have to unselect or make a change before it filters properly. 2. When filtering and the OK button works,

• Support Nested JavaScript Variables in PageSense Pop-up Targeting

  Hello Zoho PageSense Team, I hope you're doing well. I’d like to request a feature enhancement for the PageSense pop-up targeting functionality. Current Limitation: Currently, PageSense pop-ups can be triggered using simple JavaScript variables. However,

• Cannot Invert Axis for Rankings

  Hi there I want to be able to create a ranking graph in Analytics/BI, with 1 at the top of the Y axis, but I am unable to invert the axis. Super simple example in Excel below. Higher rankings need to be higher up on the graph to give the correct visual

• How to copy value from a single line field into a picklist field within a module's subform?

  Hello there, I have a single line field in a module's subform. I would like the value in the field to automatically update a picklist field within the same subform (both have items with the same names). Is this possible via function? Unfortunately, workflows

• Committed Stock and To Be Received Stock via API?

  Is it possible to retrieve Committed Stock and/or To Be Received Stock for an Item via the API? I want to use this information for calculating the amount of inventory needed to be purchased.

• Creating Email template that attaches file uploaded in specific field.

  If there's a way to do this using Zoho CRM's built-in features, then this has eluded me! I'm looking to create a workflow that automatically sends an email upon execution, and that email includes an attachment uploaded in a specific field. Email templates

• Marketer’s Space - Automate a Personalized Holiday Workflow with Zoho Campaigns

  Hello marketers, Welcome back to another post in Marketer’s Space! From Thanksgiving through Christmas, you have a flurry of opportunities to connect with your audience. In this post, we’ll see how you can plan an entire month-long automated workflow

• Sorting columns in Zoho Projects

  Hi, In project management best practice, sorting columns (ascending, descending) is an important tool. Sorting dates to see the order of tasks starting, sorting on priority or even on planned hours is a must for an efficient project control. Currently,

• Zoho CRM - Calendar Cards View - Let Users Decide What Is Displayed On Calendar Entries

  Imagine planning your week of face-to-face meetings across three counties. You’re trying to group appointments by location to make the best use of your time, but Zoho CRM’s calendar doesn’t show where each meeting is happening. You’re left trying to remember

• Next Page