Using Open ID Connect (OIDC) in Zoho Directory
As an OpenID provider, Zoho Directory (ZD) can help you in authenticating the users and getting authorization to access users profile information securely. This is done through the OIDC authentication protocol. Learn more about OIDC.
In Zoho Directory, you can configure OpenID Connect (OIDC) for any third-party apps. The way OIDC performs vary based on the type of application you configure ZD with.
How OIDC works:
Third-party apps (Relying Party) request the Authorization Endpoint of ZD to authenticate the user and get user's authorization to access certain user information. After authenticating the user and obtaining authorization, the authorization endpoint sends an ID token and access token to the Relying Party (RP).
The method used for this token exchange varies based on the type of RP and the authentication flow chosen. Learn about the RP types and the recommended authentication flows for each.
RP requests user information (claims) to the UserInfo Endpoint of ZD with the access token. ZD sends the consented claims to the RP.
OIDC Terminologies for better understanding:
OpenID Provider
Relying Party
Claims
Sign-in URL
Sign-out URL
Callback URL
Client ID
Client Secret
Authorization Endpoint
Token Endpoint
User Info Endpoint
Discovery endpoint
JSON Web Key (JWK) endpoint
OpenID Provider
Zoho Directory (ZD) is the OpenID Provider(OP). It helps in authenticating the user and also obtaining consent from the user for the RP to access certain user information.
Relying Party
Relying Party in the OIDC flow is the third-party app that you are trying to configure in ZD and which will request authentication and authorization of the user to ZD.
Claims
Any information about the user that ZD sends to RP is called as claims. ZD sends users' basic profile information such as name, first name, gender, email address and profile picture.
Sign-in URL
RP's URL where the users initiate the sign-in process.
Sign-out URL
RP's URL where users will be automatically logged out once they log out from Zoho Directory.
Callback URL
URL to which Zoho redirects users after authenticating them.
Client ID
Unique ID given to the RP to identify it when users try signing in.
Client Secret
Secret key given to the RP to identify it when users try signing in.
Authorization Endpoint
Endpoint where the user authenticates themselves and grants permission to access specific information about them.
Token Endpoint
Endpoint where RP exchanges the required tokens for the authorization code.
User Info Endpoint
Where RP requests the needed profile information of the user who is trying to sign-in.
Discovery endpoint
Where all the OIDC details related to Zoho Directory are displayed.
JSON Web Key (JWK) endpoint
Where RP receives a key to verify the authenticity of the tokens received.
Access your files securely from anywhere
Zoho CRM Training Programs
Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
Centralize Knowledge. Transform Learning.
All-in-one knowledge management and training platform for your employees and customers.
New to Zoho Writer?
Create. Review. Publish.
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho Marketing Plus?
Everything you need to run your marketing
New to Zoho Marketing Plus?
Everything you need to run your marketing
You are currently viewing the help pages of Qntrl’s earlier version. Click here to view our latest version—Qntrl 3.0's help articles.
New to Zoho Survey?
Zoho Sheet Resources
Zoho Forms Resources
New to Zoho Sign?
Zoho Sign Resources
Sign, Paperless!
New to Zoho TeamInbox?
Zoho TeamInbox Resources
New to Zoho ZeptoMail?
Design. Discuss. Deliver.
New to Zoho Workerly?
New to Zoho Recruit?
New to Zoho CRM?
New to Zoho Projects?
New to Zoho Sprints?
New to Zoho Assist?
New to Bigin?
Related Articles
Adding a custom OIDC app
The Free plan allows you to add only up to 3 non-Zoho apps. Check our app directory to see if the app you need is already integrated with Zoho Directory, or request an integration. In Zoho Directory, you can configure OpenID Connect (OIDC) for any ...OpenID Connect (OIDC) - Overview
OpenID Connect (OIDC) is an identity layer built on top of OAuth 2.0 authorization protocol. It facilitates third-party apps(clients) in verifying user's identity as well as accessing their basic profile information. Now, let's familiarize ourselves ...Adding apps - Overview
General Info: The Free plan allows you to add only up to 3 non-Zoho apps. Zoho Directory supports adding and managing five different types of apps: Directory apps These are pre-integrated SSO apps available in the app directory. SAML custom apps ...Zoom for Zoho Directory
Prerequisites A Business, Enterprise, or Education account in Zoom. An approved Zoom Vanity URL. Configure SAML in Zoho One/Directory If you're a Zoho One user: Sign in to Zoho One , then click Directory in the left menu. Go to Marketplace, then ...Add associated custom app
General Info: The Free plan allows you to add only up to 3 non-Zoho apps. Prerequisites Permissions required to perform this action: Add apps Assign apps Add associated custom app: Sign in to Zoho Directory , then click Admin Panel in the left menu. ...
New to Zoho LandingPage?
Zoho LandingPage Resources