Custom authentication with PhenixID
Prerequisites
Roles required to perform this action :
Organization Owner
Organization Admin
Custom authentication with PhenixID:
Custom authentication with PhenixID enables you and your employees to sign in and access Zoho Directory using your PhenixID credentials.
Prerequisite
- PhenixID authentication server version 3.0 or higher.
Configure a federation scenario in PhenixID
To set up custom authentication with PhenixID, you need to configure an authentication scenario in PhenixID as follows:
- Sign in to PhenixID Configuration Manager.
-
Click SCENARIOS at the top, then click FEDERATION.
-
Create an authentication scenario available in your version with the following values:
Field
Value
SEARCH FILTER mail={{request.username}}
USER IDENTIFIER ATTRIBUTE
mail
-
Once created, select the scenario from the left menu, then go to the EXECUTION FLOW tab.
- Click Find userid & issue SAML assertion, then click AssertionProvider.
- Under MISCELLANEOUS, click Add to create a new field.
-
Enter nameIdFormat in the left field, and urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress in the right field.
- Click Save.
- Switch to the IDENTITY PROVIDER tab.
-
In the POST SLO URL field, enter the SLO url in the following format:
https://{host name}.phenixid.net/saml/authenticate/logout
Note: The {host name} represents the name of your domain. For example, if the URL of your PhenixID account is https://zylker.phenixid.net/, your host name would be "zylker".
- Click Save.
-
Note down the POST SSO URL and the POST SLO URL.
- Click View SAML Metadata to open the Identity Provider(IdP) metadata file.
- Export and save the certificate metadata by creating a .cert file.
Configure PhenixID with Zoho Directory
A. Using the URLs and the certificate, set up SAML in Zoho Directory . When setting up SAML,
- Enter the POST SSO URL under Sign-in URL and Change Password URL.
- Enter the POST SLO URL under Sign-out URL.
- Upload the .cert file under Verification Certificate.
B. You need an SP metadata file to set up Zoho Directory as Service Provider (SP) in PhenixID. You can get the SP metadata file from your Zoho account:
- Sign in to Zoho Accounts.
- Click Organization in the left menu, then click SAML Authentication.
- Click Download Metadata to download the zohometadata.xml file (SP metadata).
C. Configure Zoho Directory as SP in PhenixID using the following steps:
- Return to the FEDERATION tab in PhenixID Configuration Manager.
- From the left menu, click
next to SAML metadata upload.
- Enter a name for the new scenario, add a short description (if needed), then click Next.
- Under METADATA UPLOAD, upload the SP metadata file (zohometadata.xml).
- Click Verify and show, then click OK.
- Click Next, then click Create.
- Test the configuration by signing out of your Zoho account, and then signing in. If the configuration is successful, you will be redirected to PhenixID for authentication.
Access your files securely from anywhere
Zoho CRM Training Programs
Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho Marketing Plus?
Everything you need to run your marketing
New to Zoho Marketing Plus?
Everything you need to run your marketing
You are currently viewing the help pages of Qntrl’s earlier version. Click here to view our latest version—Qntrl 3.0's help articles.
New to Zoho Survey?
Zoho Sheet Resources
Zoho Forms Resources
New to Zoho Sign?
Zoho Sign Resources
Sign, Paperless!
New to Zoho TeamInbox?
Zoho TeamInbox Resources
New to Zoho ZeptoMail?
Zoho DataPrep Resources
Design. Discuss. Deliver.
New to Zoho Workerly?
New to Zoho Recruit?
New to Zoho CRM?
New to Zoho Projects?
New to Zoho Sprints?
New to Zoho Assist?
New to Bigin?
Related Articles
Custom authentication with miniOrange
Prerequisites Roles required to perform this action : Organization Owner Organization Admin Configure SAML with miniOrange Sign in to the miniOrange admin console. Click Apps in the left menu, then click Add Application. In the Choose Application ...Use custom expressions as Name ID for SAML apps
Once you enable and configure SAML SSO for your apps in Zoho Directory, Zoho Directory will authenticate your users into those apps. During authentication, Zoho Directory will pass a value called Name ID to the apps. The Name ID matches user ...Custom authentication with CyberArk
Prerequisites Roles required to perform this action : Organization Owner Organization Admin Configure SAML with CyberArk Sign in to the CyberArk admin console. Click Web Apps under Apps in the left pane. Click Add Web Apps, then search for "Zoho". ...Custom authentication with OneLogin
Prerequisites Roles required to perform this action : Organization Owner Organization Admin Custom authentication with OneLogin: Custom authentication with OneLogin enables SAML-based single sign-on (SSO) from OneLogin to Zoho. With SSO, you and your ...Custom authentication with JumpCloud
Prerequisites Roles required to perform this action : Organization Owner Organization Admin Custom authentication with JumpCloud: Custom authentication with JumpCloud enables SAML-based single sign-on (SSO) from JumpCloud to Zoho. With SSO, you and ...
New to Zoho LandingPage?
Zoho LandingPage Resources