Custom Authentication - OneLogin | Admin Guide - Zoho One

Custom authentication with OneLogin

Custom authentication with OneLogin enables SAML-based single sign-on (SSO) from OneLogin to Zoho One. With SSO, you and your employees can sign in to OneLogin and access Zoho One directly, without having to sign in to Zoho One.

To set up custom authentication with OneLogin:
  1. Sign in to OneLogin's admin console.
  2. Click Applications, then click Add App.
  3. Search for 'SAML Test Connector'.
  4. Choose SAML Test Connector (IdP w/ attr w/ sign response).
  5. Enter "Zoho One" under display name. Upload logos if needed.
  6. Click Save.
  7. Go to the SSO tab, then copy the SAML 2.0 Endpoint (HTTP) and the SLO Endpoint (HTTP). Under X.509 Certificate, click View details, then download the X.509 PEM file.
  8. Go to the Configuration tab then enter the following details:
    1. RelayState: Enter "https://zoho.com".
    2. Audience: Enter "zoho.com".
    3. Recipient: Enter the ACS URL found in Zoho One's Custom Authentication page.
    4. ACS (Consumer) URL Validator: You can find the ACS URL in Zoho One's Custom Authentication page. 
    5. ACS (Consumer) URL: You can find the ACS URL in Zoho One's Custom Authentication page. 
    6. Single Logout URL: Enter "https://accounts.zoho.com/logout/samlsp/<ZOID>".
      7. Note: <ZOID> is the last part of your ACS URL.
  9. Click Save.
  10. Use the details from Step 7 to set up SAML in Zoho One.
    1. Enter SAML 2.0 Endpoint (HTTP) under Sign-in URL.
    2. Enter SLO Endpoint (HTTP) under Sign-out URL.
    3. Upload the X.509 PEM file under Verification Certificate.