Prerequisites

Configure SAML in Zoho One/Directory

1. If you're a Zoho One user:
   
1. Sign in to Zoho One , then click Directory in the left menu.
   
2. Go to Marketplace, then click Browse Applications.
   
3. Use the search bar to find and install InVision.
   
2. If you're a Zoho Directory user:
   
1. Sign in to Zoho Directory , then click Admin Panel in the left menu.
   
2. Go to Applications, then click Add Application.
   
3. Use the search bar to find and add InVision.
   
   
3. Name your app and enter your Subdomain.
   
   

   Note: You can find your InVision subdomain name under Principal Settings in your InVision account.
4. Click Add.
   
5. Click the Single Sign-On tab.
   
6. Click Service Provider Details to check and verify the SP details. You can also edit them if needed.
   
7. Click Identity Provider Details. If you are using InVision V6, click Download IDP Metadata. A metadata file will be downloaded. If you are using InVision V7, copy the Sign-in URL, and the X.509 Certificate. Check which version you are currently using.
   
   

Configure SAML in InVision

1. Sign in to your InVision Enterprise account.
   
2. Click your team name in the bottom-left corner, then click Settings.
   
3. Click Single sign-on.
   
4. Enable Require SSO for every member of <team name>.
   
5. Paste the copied Sign-in URL, and the X.509 Certificate in their respective fields.
   
6. Paste the following value in the Name ID Format field:
   urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
   
7. Scroll down, then enable Allow users to sign in without SAML. This will allow users to sign in using their InVision credentials in case of any SAML configuration failure.
   
8. Click Update.
   

Just-in-time provisioning

1. Sign in to your InVision Enterprise account as an administrator.
   
2. Click your team name in the bottom-left corner, then click Settings.
   
3. Click Single sign-on.
   
4. Enable Allow Just-in-Time provisioning. You can choose which role should be applied for the user when they join your team in InVision:
   
1. Guest: Can create or edit documents. To access other users' documents or spaces, they need to be invited.
   
2. Member: Can access and edit all open documents and spaces.
   
   

   Note: If Just-in-time provisioning is turned off, you can instruct the new users on how to join your team in InVision.
5. Click Update.
   

Test the SAML connection

1. Return to the Zoho Directory Admin Panel.
   
2. Go to Applications, then click InVision.
   
3. Click Assign Users, choose yourself from the list, then click Assign.
   
4. Click on the  icon next to the app's name. If everything is working, you should be automatically signed in and taken to InVision's homepage.
   
   

Enforce SAML SSO

1. Sign in to your InVision Enterprise account as an administrator.
   
2. Click your team name in the bottom-left corner, then click Settings.
   
3. Click Single sign-on.
   
4. Scroll down, then disable Allow users to sign in without SAML to enforce SSO for your team.
   
5. Click Update.