Prerequisites:

Roles required in Zoho One to perform this action:

• Organization Owner

• Organization Admin

• Custom authentication with Okta

Roles required in Okta:

• Admin

Plan required in Zoho One:

• Free plan 

• Professional plan (if you want to add multiple directories)

 In Zoho One: 

1. Sign in to Zoho One, then click Admin Panel in the left menu.

2. Go to Directory Stores, then click Add Directory.

3. Click Add next to Okta.

4. Under API INTEGRATION, note down the Sync endpoint and SCIM token. Later, you'll need to provide this information in Okta to enable sync.
   

5. Click Next.

6. Map the fields available in Zoho One to the fields available in Okta. If you'd like all users synced from Okta to have the same value for a field, map that field with a Hard-coded value. For example, if you want the value for the field 'Country' to be 'India', then you can type India as a value for the Hard-coded Value.
   To map a hard-coded value with a field:

1. Click Edit next to a field.

2. Enter the value you need in the Hard-coded Value field.

3. Click Ok.

7. Click Next.

8. Under SETTINGS, next to Password Notification, choose how you want your users to receive their One Time Password. You can either: Send the OTP to the user, or to the administrator or notify no one.

Password Notification setting is only applicable to users whose email address has a verified domain name.

9. Once you're finished, click Save and Next.

10. Choose how the change in user status in Okta should reflect in Zoho One.

11. Click Save and Close.  

In Okta:  

1. Log in to your Okta organization.

2. Select Applications in the left sidebar menu.

3. Click Create App Integration. Select SAML 2.0, then click Next.

4. Enter the required details in the General Settings tab, then click Next.

5. Enter the Sign-in URL from Custom Authentication tab in Zoho One in the Single sign-on URL field and for Audience URI in Okta enter zoho.com. Configure Custom Authentication with Okta in Zoho One's admin panel, if you haven't configured before. Once you're finished, click Next.

6. Click I'm an Okta customer adding an internal app.

7. Go to General tab, click Edit under App Settings, and change Provisioning option from None to SCIM. Once you're finished, click Save.

8. Go to Provisioning tab, then click Edit.

9. Enter the Sync endpoint copied from Zoho One in SCIM connector base URL. Enter email in the Unique identifier field for users field, and select the Push New Users option (as well as Import New Users and Profile Updates, and Push Profile Updates, optionally) in Supported provisioning actions field.

 Note: Push Groups and Import Groups options cannot be selected for a custom app integration. 

10. Select HTTP Header from the dropdown menu in Authentication Mode field.

11. Enter the SCIM token copied from Zoho One in the Token field next to Authorization. Click Test Connector Configuration, then click Save.

12. Click the Provisioning tab, select To App in the SETTINGS list, click Edit, then tick Enable checkbox next to the options you would like to enable, then click Save.

13. For Import, Select To Okta in the SETTINGS list, and in the User Creation & Mapping area, click Edit. Select Okta username format matches and click Save.

14. Click the Import tab and click Import Now. Select Incremental Import and click Import.         

15. For user assignment, navigate to Assignments tab, click Assign, then select Assign to People. Select the users to assign. Click Assign, click Save and Go Back, and click Done. 

 Note: The assignment will be synced immediately to Zoho One. 

Note:  To check if the user you've assigned was synced properly, go back to the Zoho One Admin Panel, click Directory Stores in the left menu, click Okta, and check the Members tab. 

16.  To edit, change, and delete the attribute mappings synced by Okta, navigate to Provisioning tab and scroll down.

17. To add a custom mapping, click Go to Profile Editor, select Custom from Filters column, and then click Add Attribute. Enter the required details, and click Save.

 Note: Variable name for every custom mapping has to be unique, whereas  External namespace can be the same.

18. To add a custom attribute, select Directory in the left sidebar menu, then click Profile Editor. Select User (default) from the options, then select Custom from Filters column, and click Add Attribute. Enter the required details, and click Save.