Prerequisites  

1. 15five admin privilege.
2. Contact sales@15five to activate SSO if your plan is of the basic type.

Configure SAML in Zoho One/Directory  

1. If you're a Zoho One user:

• Sign in to Zoho One, then click Directory in the left menu.

• Go to Marketplace, then click Browse Applications.

• Use the search bar to find and install 15five.

2. If you're a Zoho Directory user:

• Sign in to Zoho Directory, then click Admin Panel in the left menu.

• Go to Applications, then click Add Application.

• Use the search bar to find and add 15five.

3. Click Add.

4. Enter a Domain name. Check the application visibility option to make sure the app is visible to users, then click Add.

5. Switch to the Single Sign-On tab.

6. Click Identity Provider Details, then copy the Metadata URL, Issuer, Sign-in URL, and X.509 Certificate. Click Download IDP Metadata to download the XML content.
   

7. Click Service Provider Details to verify the SP details. You can also edit them if needed.
   

Configure SAML in 15five  

1. Sign in to 15five.

2. Click on the settings icon on the top right. Click Company settings, then switch to the SSO tab.

3. Under Getting Started, enter the name of your subdomain and click Save.

4. Once your changes have been saved, you will be required to sign in again. Enter the necessary credentials and log in.

5. Check the Automatically update metadata option, then optionally enter the Metadata URL. Paste the XML metadata from the downloaded IdP metadata file. Click Save.

6. You will land in the Details tab. Make sure the SAML Single Sign-On Enabled option is checked. Some other options are checked by default. You can check or uncheck them based on your preference.

7. The SP and IdP details are usually auto-filled. Enter the User attributes, especially Name ID Contents and Email attribute name. If the Name ID is email, then the Email attribute name field becomes optional and can be ignored. Otherwise, it is a mandatory field and you need to enter a name ID. Click Save.

Just-in-time provisioning  

Just-in-time (JIT) provisioning creates a 15five account for users during their first SSO attempt, so you don't have to do it manually for each user.

To enable JIT provisioning:

1. Sign in to 15five.

2. Under Company settings, click Details.

3. Check the Allow Creation of New Users (JIT Provisioning) option.

4. Click Save.

Test the SAML connection  

1. Return to the Zoho Directory Admin Panel.

2. Go to Applications, then click 15five.

3. Click Assign Users, choose yourself from the list, then click Assign.

4. Click on the icon next to the app's name. If everything is working, you should be automatically signed in and taken to 15five's home page.

Enforce SAML SSO  

You can force all users to use SSO. Once this is done, your users will no longer be able to log in using their 15Five credentials. To restrict users to SSO:

1. Log in to your 15Five account.

2. Go to Company Settings.

3. Switch to the Details tab, then uncheck Allow Password Sign in.