Custom Authentication with Microsoft Entra ID
Custom authentication with Azure enables SAML-based single sign-on
(SSO) from Azure to Zoho One. With SSO, you and your employees can sign
in to Azure and access Zoho One directly, without having to sign
in to Zoho One. This help article outlines the steps for configuring custom authentication in Zoho One using Microsoft Entra ID as the Identity Provider (IdP).
In Zoho One: Add Microsoft Entra ID as an IdP
The steps to add Microsoft Entra ID as an IdP in Zoho One vary between the two User Interface versions supported in Zoho One. Select the UI version you use from the tabs below and proceed with the steps that follow.
Spaces UI
Unified UI
Spaces UI
- Sign in to Zoho One, then click
in the top-right corner.
- Click Security, then open the Identity Providers tab.
- Click Add Identity Provider.
- Enter the IdP name, and select SAML as the SSO protocol.
- Copy the Assertion Consumer Services URL and the Issuer to your clipboard.
- Using the tokens copied in the previous step, add Zoho One as an app in your Microsoft Entra ID instance. Copy the Login URL and Logout URL of the created app, and download the Base64 certificate.
- Enter the Login URL copied from Microsoft Entra ID under Sign-in URL and Logout URL under the Sign-out URL.
- Upload the Base64 certificate from Microsoft Entra ID under the X509 certificate field.
- Click Add. You have added Microsoft Entra ID as an Identity provider in Zoho One.
Unified UI
- Sign in to Zoho One, then click Directory in the left menu.
- Click Security, then open the Identity Providers tab.
- Click Add Identity Provider.
- Enter the IdP name, and select SAML as the SSO protocol.
- Copy the Assertion Consumer Services URL and the Issuer to your clipboard.
- Using the tokens copied in the previous step, add Zoho One as an app in your Microsoft Entra ID instance. Copy the Login URL and Logout URL of the created app, and download the Base64 certificate.
- Enter the Login URL copied from Microsoft Entra ID under Sign-in URL and Logout URL under the Sign-out URL.
- Upload the Base64 certificate from Microsoft Entra ID under the X509 certificate field.
- Click Add. You have added Microsoft Entra ID as an Identity provider in Zoho One.
In Microsoft Entra ID: Add Zoho One as an enterprise application
- Sign in to Microsoft Entra admin center.
- Click Entra ID in the left navigation menu, then click Enterprise apps.
- Click New application and type 'Zoho One' under the Search application box.
- Select Zoho One, then click Create.
Zoho One app will be added, and you will be redirected to its Overview tab. - Click Get started under Set up single sign on, then click SAML.
- Click Edit against Basic SAML Configuration.
- Click Add identifier and enter the ACS URL copied from Zoho One.
- Click Add reply URL and enter the Issuer copied from Zoho One.
- Click Save, then click
on the top-right corner.
- Under SAML certificates, click Download against Certificate (Base64).
- Under Set up Zoho One, copy the Login URL and Logout URL to your clipboard.
- Resume from Step 6 under adding Microsoft Entra ID as an IdP in Zoho One and complete the configuration.
Access your files securely from anywhere
Zoho CRM Training Programs
Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
New to Zoho Writer?
Create. Review. Publish.
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho Marketing Plus?
Everything you need to run your marketing
New to Zoho Marketing Plus?
Everything you need to run your marketing
You are currently viewing the help pages of Qntrl’s earlier version. Click here to view our latest version—Qntrl 3.0's help articles.
New to Zoho Survey?
Zoho Sheet Resources
Zoho Forms Resources
New to Zoho Sign?
Zoho Sign Resources
Sign, Paperless!
New to Zoho TeamInbox?
Zoho TeamInbox Resources
New to Zoho ZeptoMail?
Design. Discuss. Deliver.
New to Zoho Workerly?
New to Zoho Recruit?
New to Zoho CRM?
New to Zoho Projects?
New to Zoho Sprints?
New to Zoho Assist?
New to Bigin?
Related Articles
Add Microsoft Entra ID to Zoho One
Prerequisites: Roles required to perform this action : Organization Owner Organization Admin In Zoho One: The steps to add vary between two User Interface versions supported in Zoho One. Select the UI you use from the tabs below and proceed with the ...Use custom expressions as Name ID for SAML apps
Once you enable and configure SAML SSO for your apps in Zoho One, Zoho One will authenticate your users into those apps. During authentication, Zoho One will pass a value called Name ID to the apps. The Name ID matches user identities in Zoho One ...Custom authentication with miniOrange
Configure SAML with miniOrange Sign in to the miniOrange admin console. Click Apps in the left menu, then click Add Application. In the Choose Application Type page, click SAML/WS-FED. In the displayed list of apps, search and select Zoho. You will ...Custom authentication with PingOne
Configure SAML with PingOne Go to PingOne. In the Select Account dropdown menu, select PingOne. Enter your email address, then click SIGN ON. Enter your password, then click Sign On. Click the dropdown menu in the left pane under Environments, then ...Custom authentication with Google
Custom authentication with Google enables SAML-based single sign-on (SSO) from Google to Zoho One. With SSO, you and your employees can sign in to Google and access Zoho One directly, without having to sign in to Zoho One. To set up custom ...
New to Zoho LandingPage?
Zoho LandingPage Resources