Using Open ID Connect (OIDC) in Zoho One
As an OpenID provider, Zoho One (ZO) can help you in authenticating the users and getting authorization to access users profile information securely. This is done through the OIDC authentication protocol. Learn more about OIDC.
In Zoho One, you can configure OpenID Connect (OIDC) for any third-party apps. The way OIDC performs vary based on the type of application you configure ZO with.
How OIDC works:
Third-party apps (Relying Party) request the Authorization Endpoint of ZO to authenticate the user and get user's authorization to access certain user information. After authenticating the user and obtaining authorization, the authorization endpoint sends an ID token and access token to the Relying Party (RP).
The method used for this token exchange varies based on the type of RP and the authentication flow chosen. Learn about the RP types and the recommended authentication flows for each.
RP requests user information (claims) to the UserInfo Endpoint of ZO with the access token. ZO sends the consented claims to the RP.
OIDC Terminologies for better understanding:
OpenID Provider
Relying Party
Claims
Sign-in URL
Sign-out URL
Callback URL
Client ID
Client Secret
Authorization Endpoint
Token Endpoint
User Info Endpoint
Discovery endpoint
JSON Web Key (JWK) endpoint
OpenID Provider
Zoho One (ZO) is the OpenID Provider(OP). It helps in authenticating the user and also obtaining consent from the user for the RP to access certain user information.
Relying Party
Relying Party in the OIDC flow is the third-party app that you are trying to configure in ZO and which will request authentication and authorization of the user to ZO.
Claims
Any information about the user that ZO sends to RP is called as claims. ZO sends users' basic profile information such as name, first name, gender, email address and profile picture.
Sign-in URL
RP's URL where the users initiate the sign-in process.
Sign-out URL
RP's URL where users will be automatically logged out once they log out from Zoho One.
Callback URL
URL to which Zoho redirects users after authenticating them.
Client ID
Unique ID given to the RP to identify it when users try signing in.
Client Secret
Secret key given to the RP to identify it when users try signing in.
Authorization Endpoint
Endpoint where the user authenticates themselves and grants permission to access specific information about them.
Token Endpoint
Endpoint where RP exchanges the required tokens for the authorization code.
User Info Endpoint
Where RP requests the needed profile information of the user who is trying to sign-in.
Discovery endpoint
Where all the OIDC details related to Zoho One are displayed.
JSON Web Key (JWK) endpoint
Where RP receives a key to verify the authenticity of the tokens received.
Access your files securely from anywhere
Zoho CRM Training Programs
Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
New to Zoho Writer?
Create. Review. Publish.
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho Marketing Plus?
Everything you need to run your marketing
New to Zoho Marketing Plus?
Everything you need to run your marketing
You are currently viewing the help pages of Qntrl’s earlier version. Click here to view our latest version—Qntrl 3.0's help articles.
New to Zoho Survey?
Zoho Sheet Resources
Zoho Forms Resources
New to Zoho Sign?
Zoho Sign Resources
Sign, Paperless!
New to Zoho TeamInbox?
Zoho TeamInbox Resources
New to Zoho ZeptoMail?
Design. Discuss. Deliver.
New to Zoho Workerly?
New to Zoho Recruit?
New to Zoho CRM?
New to Zoho Projects?
New to Zoho Sprints?
New to Zoho Assist?
New to Bigin?
Related Articles
Add non-directory OIDC app
The Free plan allows you to add only up to 3 non-Zoho apps. In Zoho One, you can configure OpenID Connect (OIDC) for any third-party apps. The way OIDC performs vary based on the type of application you configure ZO with. Learn how OIDC works in Zoho ...Adding Apps - Overview
Zoho One supports adding and managing three different types of apps: Zoho apps These are the standard apps that came bundled with your Zoho One subscription. Marketplace apps These are Creator custom apps and single sign-on (SSO) connectors for apps ...OpenID Connect (OIDC) - Overview
OpenID Connect (OIDC) is an identity layer built on top of OAuth 2.0 authorization protocol. It facilitates third-party apps(clients) in verifying user's identity as well as accessing their basic profile information. Now, let's familiarize ourselves ...Add non-directory bookmarked/associated apps
Sign in to Zoho One, then click Directory in the left menu. Go to Applications, then click Add Application. Under Non-Directory App, click Add. Name the app and enter a description if needed. Click Select SSO mode, then select Linked Sign-On to add a ...Integrate non-directory SAML app
Note: Check our app directory to see if the app you need is already integrated with Zoho One. Sign in to Zoho One , then click Directory in the left menu. Go to Applications, then click Add Application. Under Non-Directory App, click Add. Name the ...
New to Zoho LandingPage?
Zoho LandingPage Resources