Custom authentication with Okta
Custom authentication with Okta enables SAML-based single sign-on (SSO) from Okta to Zoho One. With SSO, you and your employees can sign in to Okta and access Zoho One directly, without having to sign in to Zoho One.
Prerequisites
In Zoho One - Roles that can perform this action:
- Organization Owner
- Organization Admin
- Custom admin roles with permissions to view apps, assign apps, and import users
In Okta - Roles that can perform this action:
- Standard admin roles
In Okta: Login and generate web tokens
- Sign in to Okta, then click Applications in the left panel.
- Click Applications in the drop-down menu, then click Create App Integration.
- Select SAML 2.0, then click Next.
- Provide a name for the app and click Next.
- Fill out the fields as given below:
- Single sign-on URL: Enter the ACS URL from Zoho One.
You can find your ACS URL in Zoho One's Custom Authentication page. - Audience URI: Enter "zoho.com".
- Name ID format: Select the preferred format.
- Click Next.
- Follow the on-screen instructions and fill out the feedback form. This is an optional step.
- Click Finish. The app details page opens once the app is created.
- Click More details, copy the Sign-on URL to your clipboard, and download the Signing Certificate.
In Zoho One: Add Okta as IdP and complete configuration
- Sign in to Zoho One.
- In the left menu, click Directory, then click Security.
- Under the Custom Authentication tab, click Add IdP. If Okta is the first IdP you are configuring in your Zoho One organization, then click Add Identity Provider and select Specific Groups under the Used By option.
- Enter a Display name for the IdP, and select the user groups to configure authentication using Okta.
- Select the IdP Priority from the drop-down. During authentication, Okta will be prioritized just above the selected IdP.
Example: Suppose the existing order of IdP priority is OneLogin, Azure, Default. If you select Azure from the drop-down menu, then the new order of priority will be OneLogin, Okta, Azure, Default. Okta will be prioritized just above Azure. - If Okta is the first IdP you're adding, this option is not applicable.
- If you have added only the default IdP, then the IdP priority will automatically be Default and cannot be changed.
- Under Configuration, choose SAML as the SSO Protocol.
- Under Sign-in URL, enter the Sign-on URL copied from Okta.
- Upload the Signing Certificate downloaded from Okta under Verification Certificate.
- Click Save.
Access your files securely from anywhere
Zoho CRM Training Programs
Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
New to Zoho Writer?
Create. Review. Publish.
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho Marketing Plus?
Everything you need to run your marketing
New to Zoho Marketing Plus?
Everything you need to run your marketing
You are currently viewing the help pages of Qntrl’s earlier version. Click here to view our latest version—Qntrl 3.0's help articles.
New to Zoho Survey?
Zoho Sheet Resources
Zoho Forms Resources
New to Zoho Sign?
Zoho Sign Resources
Sign, Paperless!
New to Zoho TeamInbox?
Zoho TeamInbox Resources
New to Zoho ZeptoMail?
Design. Discuss. Deliver.
New to Zoho Workerly?
New to Zoho Recruit?
New to Zoho CRM?
New to Zoho Projects?
New to Zoho Sprints?
New to Zoho Assist?
New to Bigin?
Related Articles
Custom authentication with miniOrange
Configure SAML with miniOrange Sign in to the miniOrange admin console. Click Apps in the left menu, then click Add Application. In the Choose Application Type page, click SAML/WS-FED. In the displayed list of apps, search and select Zoho. You will ...Custom authentication with PingOne
Configure SAML with PingOne Go to PingOne. In the Select Account dropdown menu, select PingOne. Enter your email address, then click SIGN ON. Enter your password, then click Sign On. Click the dropdown menu in the left pane under Environments, then ...Set up custom authentication for Zoho One
Custom authentication enables both SAML and JWT single sign-on (SSO) from your preferred identity providers (such as Okta or OneLogin) to Zoho One. You can set up custom authentication for a specific user group or all users in the organization. ...Use custom expressions as Name ID for SAML apps
Once you enable and configure SAML SSO for your apps in Zoho One, Zoho One will authenticate your users into those apps. During authentication, Zoho One will pass a value called Name ID to the apps. The Name ID matches user identities in Zoho One ...Custom authentication with OneLogin
Custom authentication with OneLogin enables SAML-based single sign-on (SSO) from OneLogin to Zoho One. With SSO, you and your employees can sign in to OneLogin and access Zoho One directly, without having to sign in to Zoho One. To set up custom ...
New to Zoho LandingPage?
Zoho LandingPage Resources