Add Auth0 as an IdP and enable Custom Authentication

Add Auth0 as an IdP and enable Custom Authentication

Custom authentication with Auth0 enables SAML-based single sign-on (SSO) from Auth0 to Zoho Directory. Once configured, users in your organisation can access Zoho Directory from Auth0 without signing in to Zoho Directory.

This article outlines the steps to configure custom authentication in Zoho Directory using Auth0 as the Identity Provider (IdP).

Prerequisites

In Zoho Directory - Roles required to perform this action:
  1. Organization Owner
  2. Organization Admin
  3. Security Admin role

In Auth0: Configure SAML 

  1. Sign in to Auth0.
  2. Go to Applications, then click Create Application.
  3. Enter "Zoho Directory" in the Name field, choose Regular Web Applications, then click Create.
  4. Go to the app's Addons tab, then enable the SAML2 WEB APP toggle.
  5. In the Settings tab, enter your ACS URL in the Application Callback URL field.
    6. NotesYou can find the ACS URL in Zoho Directory's Identity Providers page. 
  6. Go to the Usage tab, download the Identity Provider Certificate, and copy the Identity Provider Login URL. You'll need to submit the URL and certificate to add Auth0 as an IdP in Zoho Directory.
  7. Go back to the Settings tab. Replace the code under Settings with the following, then click Enable.
{
"nameIdentifierFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:emailaddress",
"nameIdentifierProbes": [
]
}

In Zoho Directory: Add Auth0 as an IdP

  1. Sign in to Zoho Directory, then click Admin Panel.
  2. Click Security in the left menu.
  3. Select Routing Policies, then go to the Identity Providers tab.
  4. Click Add identity Provider.
  5. Choose SAML as the SSO Protocol, then enter the name of your IdP in the IdP name field.
  6. Under Sign-in URL, paste the Identity Provider Login URL copied from Auth0.
  7. Upload the Identity Provider Certificate downloaded from Auth0 under X509 certificate field.
  8. Click Add. Auth0 will be added as an Identity Provider in Zoho Directory.

In Zoho Directory: Add Routing Policy to enable Custom Authentication

  1. On the same page, go to Routing Policies tab and click Add Policy.
  2. Enter a name for the policy, then select the members you want to apply the policy to.
  3. Select if any groups whose users should be excluded from the policy, even if they are part of the selected groups.
  4. Click Next.
  5. Under Authentication Modes, enable the Identity providers toggle, then select the IdP you added from the list.
  6. Click Next.
  7. Set Session Settings if required, then click Add. A routing policy will be created and members of this policy will use this IdP to sign in.