Prerequisites

Configure SAML in Zoho One/Directory

1. If you're a Zoho One user:
   
1. Sign in to Zoho One , then click Directory in the left menu.
   
2. Go to Marketplace, then click Browse Applications.
   
3. Use the search bar to find and install FireHydrant.
   
   
2. If you're a Zoho Directory user:
   
1. Sign in to Zoho Directory , then click Admin Panel in the left menu.
   
2. Go to Applications, then click Add Application.
   
3. Use the search bar to find and add FireHydrant.
   
   
3. Name your app.
   
4. Click Add.
   
5. Click the Single Sign-On tab.
   
6. Click Service Provider Details to check and verify the SP details. You can also edit them, if needed.
   
7. Click Identity Provider Details, then copy the Issuer, the Sign-in URL, and the X.509 Certificate.
   
   

Configure SAML in FireHydrant

1. Sign in to your FireHydrant account as an owner of your organization.
   
2. Click Organization in the left menu, then click Single Sign On.
   
3. Select Enable SSO.
   
4. Paste the copied Issuer, the Sign-in URL, and the X.509 Certificate in their respective fields.
   
5. Click Add domain to add your organization's domain. Adding domains will let the users of the added domains to sign in using SAML.
   
6. Copy the TXT key and go to your DNS settings page of your domain hosting service (GoDaddy, Google Domains etc.) then go to DNS records page.
   
7. Locate the option to add the TXT record.
   
8. In the Host/Alias/TXT field, enter '@' or leave it blank.
   
9. In the Value/Points to/Destination field, paste the copied TXT key from FireHydrant.
   
10. In the TTL field, set TTL to the minimum possible value recommended by your domain host. Save the changes. It may take up to 72 hours for the changes to be updated.
    
11. Click Save.
    

Just-in-time provisioning

Test the SAML connection

1. Return to the Zoho Directory Admin Panel.
   
2. Go to Applications, then click FireHydrant.
   
3. Click Assign Users, choose yourself from the list, then click Assign.
   
4. Click the  icon next to the app's name. If everything is working, you should be automatically signed in and taken to FireHydrant's homepage.