SAML Integration with Azure

Accessing Zoho via Azure using SAML

By configuring SAML based SSO with Azure, you can let your users sign in to Zoho using their Azure credentials.

Required items from Azure

You will need the following items from Azure to configure SAML in Zoho. You can follow the configuration steps to get these from Azure.
  1. Certificate (Base 64)
  2. Login URL
  3. Logout URL

Steps to configure SAML

A. Create an app in Azure

  1. Sign in to your Microsoft Azure portal as an admin.
  2. Under Azure services, click Azure Active Directory (or) find Active Directory using the search bar at the top.
  3. Click Enterprise applications under Manage in the left navigation menu.
  4. Click All Applications, then click New application.
  5. Click Create your own application.

  6. Enter a name for your application under What's the name of your app?.
  7. Select Integrate any other application you don't find in the gallery, then click Create. Your app will be created and you will be redirected to the app's page.

B. Configure Zoho details in Azure

  1. In a new tab, sign in at accounts.zoho.com.
  2. Go to Organization from the left menu. If you can't find Organization, click View more.
  3. Under SAML Authentication, click Download Metadata. A file named zohometadata.xml will be downloaded.

  4. Open the metadata file using a browser or a text editor.
  5. From the metadata file, copy and save the Entity ID and ACS URL.
  6. Return to the app's page in Azure portal.
  7. Click Set up single sign-on under the Getting Started section.
  8. Select SAML.
  9. Go to Step 1: Basic SAML Configuration, then click Edit.
  10. Paste the copied Entity ID in the Identifier field.
  11. Paste the copied ACS URL  in the Reply URL field.

  12. (optional) In the Sign On URL field, enter the URL in the following format:
    https://<accounts-url>/samlauthrequest/<orgid>?serviceurl=<service-url>
    1. <accounts-url> : The first part of the ACS URL after https://. For example, accounts.zoho.eu
    2. <orgid> : The last (numeric) part of the ACS URL
    3. <service-url> : The URL of the service you want your users to access. E.g., https://mail.zoho.com for Zoho Mail. (The ".com" should be whatever the domain present in your ACS URL.)
  13. (optional) In the Relay State field, enter the same service URL you have entered in the previous step. For example, https://mail.zoho.com.
  14. Click Save.

C. Configure Azure details in Zoho

  1. Go to Step 3: SAML Signing Certificate, and download Certificate (Base 64).

  2. Go to Step 4: Set up {application name}, and copy the Login URL and Logout URL.
  3. Return to the SAML Authentication page in accounts.zoho.com.
  4. Configure SAML in your Zoho account using the downloaded certificate and copied URLs from Azure.
    1. Paste the Login URL in the Sign-in URL field.
    2. Paste the Logout URL in the Sign-out URL field.
    3. Upload the Certificate in the X.509 Certificate field.
  5. Click Configure.

Assign users to the app in Azure

Your users in Azure can use this newly configured Zoho app to sign in to Zoho. However, before that, you need to assign your users to this app. You can follow the instructions in the following Azure article to assign your users to the app.

Test the SAML configuration

You can test if the configuration is working properly using the following steps as a user in Azure.

SP-initiated flow:
  1. Go to your Zoho sign-in page.
  2. Enter your email address, then click Next. You will be redirected to Azure for authentication.
  3. If you are not signed in to Azure already, enter your Azure credentials to sign in. You will now be redirected back to Zoho and will be signed in.
IdP-initiated flow:
  1. Go to myapplications.microsoft.com.
  2. Click on the Zoho app you have configured. You will be redirected to Zoho and will be signed in.

Enable single logout (SLO)

Azure supports both IdP-initiated and SP-initiated single log-out. If you enable single logout, when your users sign out from Zoho, they will be automatically signed out from Azure and vice-versa.

Steps to enable single log-out:
  1. Sign in to your Microsoft Azure portal as an admin.
  2. Go to the configured application's page.
  3. Click Single sign-on in the left menu.
  4. Go to Step 4: Set up {app name}, then copy the Logout URL.
  5. Go to SAML Authentication at accounts.zoho.com, then click Edit.
  6. Enter the copied URL in the Sign-out URL field.
  7. Select Do you need a sign-out response?.
  8. Click Configure. You may need to re-enter the X.509 certificate before this.
  9. Click Download Metadata.
  10. Open the downloaded file using a browser or a text editor, then copy the Single Logout URL present under the tag <md: SingleLogoutService>.
  11. Return to the Azure portal.
  12. Click Edit next to Step 1: Basic Configuration.
  13. Enter the copied Single logout URL in the Logout URL field, then click Save.

If you encounter any errors while signing in using SAML, you can refer to our troubleshooting guide.

    Zoho CRM Training Programs

    Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.

    Zoho CRM Training
      Redefine the way you work
      with Zoho Workplace

        Zoho DataPrep Personalized Demo

        If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.

        Zoho CRM Training

          Create, share, and deliver

          beautiful slides from anywhere.

          Get Started Now


            Zoho Sign now offers specialized one-on-one training for both administrators and developers.

            BOOK A SESSION





                        Still can't find what you're looking for?

                        Write to us:  support@zohoforms.com


                              




                            

                              Zoho Marketing Automation

                                Zoho Sheet Resources

                                 




                                    Zoho Forms Resources


                                      Secure your business
                                      communication with Zoho Mail


                                      Mail on the move with
                                      Zoho Mail mobile application

                                        Stay on top of your schedule
                                        at all times


                                        Carry your calendar with you
                                        Anytime, anywhere




                                              Zoho Sign Resources

                                                Sign, Paperless!

                                                Sign and send business documents on the go!

                                                Get Started Now


                                                    Zoho SalesIQ Resources



                                                        Zoho TeamInbox Resources



                                                                Zoho DataPrep Resources



                                                                  Zoho DataPrep Demo

                                                                  Get a personalized demo or POC

                                                                  REGISTER NOW


                                                                    Design. Discuss. Deliver.

                                                                    Create visually engaging stories with Zoho Show.

                                                                    Get Started Now











                                                                                          • Related Articles

                                                                                          • Accessing Zoho via AWS using SAML

                                                                                            By configuring SAML-based SSO with AWS, you can let your users sign in to Zoho using their AWS credentials. Required items from AWS: You will need the following items from AWS to configure SAML in Zoho. You can follow the configuration steps to get ...
                                                                                          • Accessing Zoho via Google using SAML

                                                                                            You can use Google as an identity provider (IdP) to access Zoho applications. Google IdP is a user management platform for Google Apps and services. Required items from Google You will need the following items from Google to configure SAML in Zoho. ...
                                                                                          • Accessing Zoho via Auth0 using SAML

                                                                                            By configuring SAML based SSO with Auth0, you can let your users sign in to Zoho using their Auth0 credentials. Required items from Auth0 You will need the following items from Auth0 to configure SAML in Zoho. You can follow the configuration steps ...
                                                                                          • Troubleshoot SAML related errors

                                                                                            Error Message Reason Solution Your organization has configured SAML authentication, please sign in via SAML credentials You cannot sign in to your Zoho account via any linked account, if your organization has mandated you to sign in only through SAML ...
                                                                                          • Accessing Zoho via Okta using SAML

                                                                                            You can configure SAML-based SSO with Okta as your identity provider (IdP) to let your users sign in to Zoho. Required items from Okta You will need the following items from Okta to configure SAML in Zoho. You can follow the configuration steps to ...
                                                                                          Wherever you are is as good as
                                                                                          your workplace

                                                                                            Resources

                                                                                            Videos

                                                                                            Watch comprehensive videos on features and other important topics that will help you master Zoho CRM.



                                                                                            eBooks

                                                                                            Download free eBooks and access a range of topics to get deeper insight on successfully using Zoho CRM.



                                                                                            Webinars

                                                                                            Sign up for our webinars and learn the Zoho CRM basics, from customization to sales force automation and more.



                                                                                            CRM Tips

                                                                                            Make the most of Zoho CRM with these useful tips.



                                                                                              Zoho Show Resources