Custom authentication with PhenixID
Prerequisites
Roles required to perform this action :
Organization Owner
Organization Admin
Custom authentication with PhenixID:
Custom authentication with PhenixID enables you and your employees to sign in and access Zoho Directory using your PhenixID credentials.
Prerequisite
- PhenixID authentication server version 3.0 or higher.
Configure a federation scenario in PhenixID
To set up custom authentication with PhenixID, you need to configure an authentication scenario in PhenixID as follows:
- Sign in to PhenixID Configuration Manager.
-
Click SCENARIOS at the top, then click FEDERATION.
-
Create an authentication scenario available in your version with the following values:
Field
Value
SEARCH FILTER mail={{request.username}}
USER IDENTIFIER ATTRIBUTE
mail
-
Once created, select the scenario from the left menu, then go to the EXECUTION FLOW tab.
- Click Find userid & issue SAML assertion, then click AssertionProvider.
- Under MISCELLANEOUS, click Add to create a new field.
-
Enter nameIdFormat in the left field, and urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress in the right field.
- Click Save.
- Switch to the IDENTITY PROVIDER tab.
-
In the POST SLO URL field, enter the SLO url in the following format:
https://{host name}.phenixid.net/saml/authenticate/logout
Note: The {host name} represents the name of your domain. For example, if the URL of your PhenixID account is https://zylker.phenixid.net/, your host name would be "zylker".
- Click Save.
-
Note down the POST SSO URL and the POST SLO URL.
- Click View SAML Metadata to open the Identity Provider(IdP) metadata file.
- Export and save the certificate metadata by creating a .cert file.
Configure PhenixID with Zoho Directory
A. Using the URLs and the certificate, set up SAML in Zoho Directory . When setting up SAML,
- Enter the POST SSO URL under Sign-in URL and Change Password URL.
- Enter the POST SLO URL under Sign-out URL.
- Upload the .cert file under Verification Certificate.
B. You need an SP metadata file to set up Zoho Directory as Service Provider (SP) in PhenixID. You can get the SP metadata file from your Zoho account:
- Sign in to Zoho Accounts.
- Click Organization in the left menu, then click SAML Authentication.
- Click Download Metadata to download the zohometadata.xml file (SP metadata).
C. Configure Zoho Directory as SP in PhenixID using the following steps:
- Return to the FEDERATION tab in PhenixID Configuration Manager.
- From the left menu, click
next to SAML metadata upload.
- Enter a name for the new scenario, add a short description (if needed), then click Next.
- Under METADATA UPLOAD, upload the SP metadata file (zohometadata.xml).
- Click Verify and show, then click OK.
- Click Next, then click Create.
- Test the configuration by signing out of your Zoho account, and then signing in. If the configuration is successful, you will be redirected to PhenixID for authentication.
Access your files securely from anywhere
Zoho CRM Training Programs
Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
New to Zoho Writer?
Create. Review. Publish.
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho Marketing Plus?
Everything you need to run your marketing
New to Zoho Marketing Plus?
Everything you need to run your marketing
You are currently viewing the help pages of Qntrl’s earlier version. Click here to view our latest version—Qntrl 3.0's help articles.
New to Zoho Survey?
Zoho Sheet Resources
Zoho Forms Resources
New to Zoho Sign?
Zoho Sign Resources
Sign, Paperless!
New to Zoho TeamInbox?
Zoho TeamInbox Resources
New to Zoho ZeptoMail?
Design. Discuss. Deliver.
New to Zoho Workerly?
New to Zoho Recruit?
New to Zoho CRM?
New to Zoho Projects?
New to Zoho Sprints?
New to Zoho Assist?
New to Bigin?
Related Articles
Custom authentication with miniOrange
Prerequisites Roles required to perform this action : Organization Owner Organization Admin Configure SAML with miniOrange Sign in to the miniOrange admin console. Click Apps in the left menu, then click Add Application. In the Choose Application ...Custom authentication with CyberArk
Prerequisites Roles required to perform this action : Organization Owner Organization Admin Configure SAML with CyberArk Sign in to the CyberArk admin console. Click Web Apps under Apps in the left pane. Click Add Web Apps, then search for "Zoho". ...Custom authentication with PingOne
Prerequisites Roles required to perform this action : Organization Owner Organization Admin Configure SAML with PingOne Go to PingOne. In the Select Account dropdown menu, select PingOne. Enter your email address, then click SIGN ON. Enter your ...Custom authentication with Okta
Custom Authentication with Okta enables SAML-based single sign-on (SSO) from Okta to Zoho Directory. With SSO, you and your employees can sign in to Okta and directly access Zoho Directory, without having to sign in to Zoho Directory. Prerequisites ...Deactivate/Activate an IdP
Prerequisites Permissions required to perform this action : Configure SSO Deactivate/Activate an IdP: After you add an IdP, you can either activate or deactivate it. If you activate an IdP, it will be applied to certain users based on the priority. ...
New to Zoho LandingPage?
Zoho LandingPage Resources