Note: 

1. Support for passkeys in Zoho Creator’s default portal login is currently under development and will be available soon. Until then, you can enable passkey-based authentication for your portals by integrating any SSO provider that supports passkeys using SAML.
   
   
2. In this tutorial, Auth0 is used as identity provider for demonstration purposes only. Zoho Creator does not endorse or recommend any specific SSO vendor. You may use any SAML compatible provider that supports passkeys. While the configuration steps may vary, the overall integration flow remains the same.
   

Prerequisites

1. Set up a portal for your preferred application in your Zoho Creator account to enable SAML authentication. Follow the steps in the Setting up a portal guide to create the portal.
   
2. Create an Auth0 account if you do not have an existing one.
   

Steps to follow

Step 1: Configure SAML authentication for portal with Auth0

1. Navigate to the Portals under Deploy section in your creator account dashboard.
   
2. Click on the preferred portal to configure the SAML authentication.
   
3. Select the Authentication tab and select SAML. The SAML Authentication pane will slide in from the right.
   
4. Copy the ACS URL and Entity ID under the Service Provider Details.
   
5. Open a new tab in your browser and log in to your Auth0 account. You will be redirected to the Auth0 dashboard.
   
6. Navigate to Applications under Applications section in the left pane and click + Create Application.
   
7. Enter a name for your application and choose the application type as Regular Web Application and click Create. The detailed view of the application you've created will be displayed.
   
8. Select the Addons tab in the top menu bar and click on the SAML2 Web App toggle. A configuration pop-up will appear.
   
9. Click the Settings tab in the pop-up and paste the ACS URL copied from your Creator portal (refer to step 4) in the Application Callback URL field.
   
10. Replace the existing code with the below code in the Settings editor.
    
    
    
1. {
2.   "audience": "{Portal Entity ID}",
3.   "recipient": "{ACS URL}",
4.   "nameIdentifierFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:emailaddress",
5.   "nameIdentifierProbes": [
6.     "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress",
7.     "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name"
8.   ],
9.   "logout": {
10.     "callback": "{Portal Logout URL}",
11.     "slo_enabled": true
12.   },
13.   "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
14. }
    
1. Ensure you update the placeholders in the code with respect to your Zoho Creator portal.
1. {Portal Entity ID} - Replace it with the Entity ID copied form your Creator portal (refer to step 4).
   
2. {ACS URL} - Replace it with the ACS URL copied form your Creator portal (refer to step 4).
   
3. {Portal Logout URL} - Construct the logout URL using your portal URL and Portal ID in the following format:
   
1. https://<Portal_URL>/accounts/p/40-<Portal_ID>/logout/samlsp/<Portal_ID>
   
1. The <Portal_ID> is the numeric part of the Entity ID. For example, if the Entity ID is 11118664031.zoho.com then the Portal ID is 11118664031. 
   
2. Example, {Portal Logout URL}: https://pos.zohocreatorportal.com/accounts/p/40-11118664031/logout/samlsp/11118664031
11. Scroll down and click Enable to activate the SAML authentication.
    
12. Switch to the Usage tab in the SAML pop-up and perform the following actions:
    
1. Click Download Auth0 certificate hyperlink. The Auth0 certificate will be downloaded in a .pem file format.
   
2. Click Download near the Identity Provider Metadata to download the metadata file.
   
3. Copy the Identity Provider Login URL.
   
   
13. Switch back to the browser tab where Zoho Creator is open and continue configuring the SAML authentication for your portal (refer to step 4). Paste the Identity Provider Login URL you copied earlier into the Login URL field.
    
14. Enter the Logout URL by appending '/logout' to your Identity Provider Login URL. You can also find the logout URL in the downloaded metadata file (refer to step 12).
    Example : https://dev-tqgtpgf3yz8u2ey7.us.auth0.com/samlp/OGqE9fxxxxxxxxxovsUlu9kB/logout
    
15. Click the Get key from file link, then click Browse and select the downloaded certificate (.pem) file (refer to step 12).
    
    
16. Select RSA as the algorithm, since it is the default algorithm used by Auth0, then click Configure.
    

Step2: Enabling passkey authentication with Auth0

1. Switch to the browser tab where your Auth0 account is open.
   
2. Navigate to Authentication Profile under Authentication from your dashboard and select Identifier First as your login flow. Click Save.
   
3. Navigate to Database under Authentication and click on the Username-Password-Authentication database.
   
4. Select the Authentication Methods tab and click Configure button in the Passkey card. The Passkey configuration tab will slide in from the right.
   
5. Select the Enable Passkey checkbox and click Save.
   

See how it works

Related topics

1. Understand SAML authentication
   
2. Configure SAML authentication in Portal