Custom authentication with ADFS
Prerequisites
Roles required to perform this action :
Organization Owner
Organization Admin
Custom authentication with ADFS:
Custom authentication with Active Directory Federation Services (ADFS) enables SAML-based single sign-on (SSO) from ADFS to Zoho. With SSO, you and your employees can sign in to ADFS and access Zoho directly, without having to sign in to Zoho.
To set up custom authentication with ADFS:
- Obtain the Sign-in URL, Sign-out URL, and the certificate from ADFS:
- Sign in to ADFS 3.0 server and open the Management Console.
- Right-click Service in the left-pane menu, then choose Edit Federation Service Properties.
- Under General, ensure that your DNS entries and certificate names are correct.
- Using your Federation Service name, use a browser and go to "https://{federationservicename}.com/federationMetaData/2007-06/FederationMetaData.xml".
- The Sign-in URL and Sign-out URL are present in the XML file as SingleSignOnService and SingleLogoutService tags respectively.
- Export the Token-Signing certificate:
- Right-click Certificate in the left-pane menu and click View Certificate.
- Click the Details tab.
- Click Copy to File, then click Next.
- Make sure No, do not export the private key is selected, then click Next.
- Select Base-64 encoded X.509 (.cer), then click Next.
- Choose where to save the file and name it.
- Click Next.
- Select Finish.
- Submit this data to Zoho to set up SAML in Zoho Directory.
- Add a Relying Party Trust:
- Under Trust Relationships in the left-pane menu, right-click Relying Party Trusts, then click Add Relying Party Trust.
- In Select Data Source, select Enter Data about the relying party manually.
- In Specify Display Name, enter "zoho.com" as the Display Name.
- In Choose Profile, select AD FS profile.
- Click Next.
- In Configure URL, check the Enable support for the SAML 2.0 WebSSO protocol.
- Enter the ACS URL provided on Zoho Directory's Custom Authentication page in the Service URL text box.
- In Configure Identifiers, choose directory.zoho.com as the Relying Party Trust Identifier.
- In Configure Multi-factor Authentication now, choose I do not want to configure multi-factor authentication settings for this relying party trust at this time.
- In Choose Issuance Authorization Rules, select Permit all users to access this relying party.
- Click Close.
- Create claim rules:You can create claim rules once the relying party trust is created. By default, the Claims Rule editor opens once you create a trust.
- Click Add Rule to create a new rule.
- In Choose Rule Type, select Send LDAP Attributes as Claims in the dropdown menu.
- Click Next.
- In Configure Claim Rule:
- Enter a Claim rule name.
- Choose Active directory under Attribute Store.
- Choose E-Mail Addresses under LDAP Attribute.
- Choose E-Mail Address under Claim Type.
- Click Finish.
- Create another claim rule and select the Transform an Incoming Claim template.
- In Configure Claim Rule:
- Enter a Claim rule name.
- Choose E-Mail Address under Incoming claim type.
- Choose Name ID under Outgoing claim type.
- Choose Email under Outgoing Name ID format.
- Select Pass through all claim value.
- Click Finish.
Access your files securely from anywhere
Zoho CRM Training Programs
Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho Marketing Plus?
Everything you need to run your marketing
New to Zoho Marketing Plus?
Everything you need to run your marketing
You are currently viewing the help pages of Qntrl’s earlier version. Click here to view our latest version—Qntrl 3.0's help articles.
New to Zoho Survey?
Zoho Sheet Resources
Zoho Forms Resources
New to Zoho Sign?
Zoho Sign Resources
Sign, Paperless!
New to Zoho TeamInbox?
Zoho TeamInbox Resources
New to Zoho ZeptoMail?
Zoho DataPrep Resources
Design. Discuss. Deliver.
New to Zoho Workerly?
New to Zoho Recruit?
New to Zoho CRM?
New to Zoho Projects?
New to Zoho Sprints?
New to Zoho Assist?
New to Bigin?
Related Articles
Set up custom authentication for Zoho Directory
Prerequisites Roles required to perform this action : Organization Owner Organization Admin Set up custom authentication for Zoho Directory: Custom authentication enables both SAML and JWT single sign-on (SSO) from your preferred identity providers ...Custom authentication with OneLogin
Prerequisites Roles required to perform this action : Organization Owner Organization Admin Custom authentication with OneLogin: Custom authentication with OneLogin enables SAML-based single sign-on (SSO) from OneLogin to Zoho. With SSO, you and your ...Custom authentication with JumpCloud
Prerequisites Roles required to perform this action : Organization Owner Organization Admin Custom authentication with JumpCloud: Custom authentication with JumpCloud enables SAML-based single sign-on (SSO) from JumpCloud to Zoho. With SSO, you and ...Custom authentication with Auth0
Prerequisites Roles required to perform this action : Organization Owner Organization Admin Custom authentication with Auth0: Custom authentication with Auth0 enables SAML-based single sign-on (SSO) from Auth0 to Zoho. With SSO, you and your ...Custom authentication with Okta
Prerequisites Roles required to perform this action : Organization Owner Organization Admin Custom authentication with Okta: Custom Authentication with Okta enables SAML-based single sign-on (SSO) from Okta to Zoho. With SSO, you and your employees ...
New to Zoho LandingPage?
Zoho LandingPage Resources