Prerequisites

• A Business or Enterprise account with Notion

Configure SAML in Zoho One or Zoho Directory

1. If you're a Zoho One user:

• Sign in to Zoho One , then click Directory in the left menu.

• Go to Marketplace, then click Browse Applications.

• Use the search bar to find and install Notion.
  

2. If you're a Zoho Directory user:

• Sign in to Zoho Directory , then click Admin Panel in the left menu.

• Go to Applications, then click Add Application.

• Use the search bar to find and add Notion.
  

3. Name your app and enter the domain name and account ID.
   

Note: Your domain name is the first part of your Notion URL. If your URL is zylker.notion.com, your domain name will be zylker. The account ID is the last part of Notion's single sign-on URL. If the Single SignOn URL is https://zylker.notion.com/sso/saml/123, the account ID will be 123.

4. If you want to test the SAML configuration before allowing users to access Notion, uncheck the Display app to users option. You can later make the app visible to all users.

5. Click Add.

6. Click on the Single Sign-On tab.

7. Click Service Provider Details to check and verify the SP details. You can also edit them, if needed.

8. Click Identity Provider Details, then click the Download IDP Metadata button.
   

Configure SAML in Notion

1. Sign in to your Notion account.

2. Click Settings & Members in the left menu, then click Security & Identity.

3. Scroll down to the SAML single sign-on section.

4. Enter the following details:

• Email domains: Click Contact support to configure the email domains for which you want to enable SAML-based SSO. Any user with an email address belonging to the email domain will be allowed to sign in via SSO.

• IDP metadata URL: Enter the IDP metadata XML file which was downloaded earlier.

5. Use the toggle bar to Enable SAML.

6. Click Update.

Just-in-time provisioning

Just-in-time (JIT) provisioning creates a Notion account for users during their first SSO attempt, so you don't have to do it manually for each user.

To enable JIT provisioning:

1. Sign in to your Notion account.

2. Click Settings & Members in the left menu, then click Security & Identity.

3. Scroll down to the SAML single sign-on section.

4. Use the toggle bar to Automatically create accounts on sign-in.

5. Click Update.

Test the SAML connection

1. Return to the Zoho Directory Admin Panel.

2. Go to Applications, then click Notion.

3. Click Assign Users, choose yourself from the list, then click Assign. Ensure that the primary email address belongs to the email domain added in Notion.

4. Click the icon next to the app's name. If everything is working, you should be automatically signed in and taken to Notion's homepage.
   

Enforce SAML SSO

After successfully testing SSO, you can enforce it for all users. Once this is done, your users will no longer be able to sign in using their Notion credentials.

To restrict users to SSO:

1. Sign in to your Notion account.

2. Click Settings & Members in the left menu, then click Security & Identity.

3. Scroll down to the SAML single sign-on section.

4. Use the toggle bar to Enforce SAML.

5. Click Update.

   After successfully testing the SSO, you can make Notion available for all users to access from their My Apps page.

To make Notion visible to all users:

1. Sign in to the Zoho Directory Admin Panel.

2. Go to Applications, then click Notion.

3. Click Unhide.

4. You can now access Notion from Zoho One's My Apps page.