Security Assertion Markup Language (SAML) is a mechanism used for exchanging authenticated and authorized data between applications, particularly between an identity provider (IdP) and a service provider, such as Zoho DataPrep.

Administrators can configure SAML-based single sign-on (SSO) for end users, so they can access Zoho DataPrep without being prompted to enter separate login credentials.

SAML single sign-on authentication involves a service provider, Zoho DataPrep and an identity provider. When you've enabled SAML, end-user management and authentication are handled through your organization's identity provider . An end user who requests access to Zoho DataPrep will be redirected to the Identity provider  for authentication. The identity provider authenticates the user and, in return, generates an authentication assertion, which indicates that the user has been successfully verified. Upon receiving the assertion, the user is redirected back to Zoho DataPrep and signed in seamlessly. As a single point of authentication with your trusted identity provider, SAML ensures that your users' credentials remain secure within your organization’s firewall.

 

Benefits of using the SAML-based SSO method of authentication are:

 

To ensure a successful setup of SAML Single Sign-On (SSO) in Zoho DataPrep, follow the below steps:

1. Sign in to your Zoho Directory admin console using your organization admin credentials.

2. Choose Applications from the left pane and click the Add application button. Click the Create Custom App option.

3. Enter the display name, description and click the SSO mode drop down. The SAML Sign in type is selected by default.

4. Provide the following Service provider details from the Zoho DataPrep account. To find these details go to Zoho DataPrep->Settings->Feature Control->SSO Settings->Service Provider details

In this step, we tell the Identity Provider which service is requesting authentication, where to send the login response, and how to verify it—ensuring a secure and seamless SSO connection.

Sign-in URL - The URL where users are redirected to initiate the SSO login process for Zoho DataPrep. This acts as the primary entry point for authentication through the configured identity provider.

Assertion Consumer Service (ACS) URL - The URL on the DataPrep's side that receives the SAML response from the identity provider after successful authentication. This endpoint processes the assertion and grants user access.

Relay State - An optional parameter used to redirect users to a specific page or resource in Zoho DataPrep after they are successfully authenticated.

Sign-out URL - The URL to which users are redirected to log out from DataPrep and end the SSO session. This helps ensure that the session is terminated both on the DataPrep and the identity provider side(Zoho Directory).

Issuer - A unique identifier (entity ID) assigned to Zoho DataPrep in the SSO configuration. It helps the identity provider recognize and validate requests from the service.

 

Provide the above details in the Directory and click Done.

5. Now the app is created. Click the ellipses icon and choose the Assign users button on the top right. Add the Email ID and role for the users you would like to add to your DataPrep organization.

6. After adding users, click the Single Sign-on option and go to the Identity Provider Details.

 

7. Copy and paste the above details in the DataPrep account and click Save. Go to Zoho DataPrep->Settings->Feature Control->SSO Settings>Identity Provider details

In this step, by copying the Identity Provider details to the Service Provider we allow the service to recognize and trust the Identity Provider, verify authentication responses, and redirect users correctly during SSO login.

8. After configuring, open a browser and try to access your white label portal. You will be redirected to Zoho Directory for authentication. Upon successful login, you will be seamlessly logged into the white label portal of Zoho DataPrep.

To avoid this,

After deactivating or deleting the custom application in Zoho Directory, go to Zoho DataPrep → SSO settings. Remove or disable the Identity Provider (IdP) details to fully disconnect the SAML integration. Once you disconnect it, your White Label portal will work as a standalone portal and redirect correctly to the login (or relevant access) page without depending on the removed Directory application.