Add IdP
The steps to add IdP vary between three user interface versions supported in Zoho One. Select the UI version you use from the tabs below and proceed with the steps that follow.
One Experience UI
Spaces UI
Unified UI
One Experience UI
- Sign in to Zoho One, then click Admin Panel icon
on the top-right corner.
- Click Security on the left menu.
- Select Routing Policies, then go to Identity Providers tab.
- Click Add Identity Provider.
Spaces UI
- Sign in to Zoho One, then click Directory Settings icon
on the top-right corner.
- Click Security on the left menu.
- Select Routing Policies, then go to Identity Providers tab.
- Click Add Identity Provider.
Unified UI
- Sign in to Zoho One, then click Directory in the left menu.
- Go to the Security tab, then go to Identity Providers.
- Click Add IdP.
Select the SSO protocol for your IdP. The configuration steps vary depending on the protocol selected.
SAML
- Select SAML from the SSO Protocol dropdown.
- Enter a name for your IdP in the IdP name field.
- Copy the Assertion Consumer Services URL. You will need it to configure SSO at your IdP.
- Copy the Issuer/Entity ID. You will need it to verify that the assertion is from Zoho at your IdP.
- Enter the following details obtained from your IdP:
- Sign-in URL: The URL users are redirected to when signing in to Zoho.
- Sign-out URL: The URL users are redirected to after signing out of Zoho.
- Select the Name ID format in which the IdP sends the user's identifier in the SAML assertion.
- X509 certificate: The certificate with which Zoho can check the digital signature on the IdP's authentication response.
- Enter the Sign-in parameters and Sign-out parameters if needed.
- Click Add.
To allow users to sign in using this IdP, configure a Routing Policy and enable Identity Providers. Click here to know how to configure a routing policy.
JWT
- Select JWT from the SSO Protocol dropdown.
- Enter a name for your IdP in the IdP name field.
- Copy the Assertion Consumer Services URL. You will need it to configure SSO at your IdP.
- Enter the following details obtained from your IdP:
- Sign-in URL: The URL users are redirected to when signing in to Zoho.
- Sign-out URL: The URL users are redirected to after signing out of Zoho.
- Select a signing algorithm.
- HS256: The HS256 signing algorithm makes use of a secret key shared between the IdP and Zoho Directory to generate a hashing function, which serves as the signature.
Copy the Secret Key. You will need it to configure SSO at your IdP. - RS256: The RS256, on the other hand, makes use of a public/private key pair. The IdP has a private key which generates a signature, and the service provider (Zoho) validates the signature using the public key.
Upload the Verification Certificate downloaded from the IdP under X509 certificate field. - Enter the Sign-in parameters and Sign-out parameters if needed.
- Click Add.
To allow users to sign in using this IdP, configure a Routing Policy and enable Identity Providers. Click here to know how to configure a routing policy.
OIDC
- Select OIDC from the SSO Protocol dropdown.
- Enter a name for your IdP in the IdP name field.
- Enter the Client ID and Client Secret obtained from your IdP.
- Copy the Redirect URL. You will need it to configure SSO at your IdP.The Redirect URL will be generated only after the IdP is added. You can copy it after completing the configuration.
- Enter the Issuer URL obtained from your IdP. This automatically retrieves the authorization URL and access token URL. Alternatively, if you do not provide the Issuer URL, enter the Authorization URL and Access Token URL manually.
- Enter the Scopes, User information URL, and Sign-out URL if needed.
- Click Add.
To allow users to sign in using this IdP, configure a Routing Policy and enable Identity Providers. Click here to know how to configure a routing policy.
Access your files securely from anywhere
Zoho CRM Training Programs
Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
Centralize Knowledge. Transform Learning.
All-in-one knowledge management and training platform for your employees and customers.
New to Zoho Writer?
Create. Review. Publish.
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho Marketing Plus?
Everything you need to run your marketing
New to Zoho Marketing Plus?
Everything you need to run your marketing
You are currently viewing the help pages of Qntrl’s earlier version. Click here to view our latest version—Qntrl 3.0's help articles.
New to Zoho Survey?
Zoho Sheet Resources
Zoho Forms Resources
New to Zoho Sign?
Zoho Sign Resources
Sign, Paperless!
New to Zoho TeamInbox?
Zoho TeamInbox Resources
New to Zoho ZeptoMail?
Design. Discuss. Deliver.
New to Zoho Workerly?
New to Zoho Recruit?
New to Zoho CRM?
New to Zoho Projects?
New to Zoho Sprints?
New to Zoho Assist?
New to Bigin?
Related Articles
Add an IdP
Sign in to Zoho One, then click Directory in the left navigation menu. Go to Security, then click the Custom Authentication tab. If you are adding your first IdP, click Add Identity Provider. Otherwise, click Add IdP. Enter the name of your IdP in ...Edit IdP details
Sign in to Zoho One, then click Directory in the left navigation menu. Go to Security, then click the Custom Authentication tab. Click the IdP whose details you want to edit. Note: The "Default" IdP can neither be renamed, nor can it be applied to ...Deactivate/Activate an IdP
After you add an IdP, you can either activate or deactivate it. If you activate an IdP, it will be applied to certain users based on the priority. They will then have to sign in with SSO via this IdP. If you deactivate an IdP, then users who were ...Add routing policy
The steps to add routing policy vary between three user interface versions supported in Zoho One. Select the UI version you use from the tabs below and proceed with the steps that follow. One Experience UI Spaces UI Unified UI One Experience UI Sign ...Set up custom authentication for Zoho One
Custom authentication enables both SAML and JWT single sign-on (SSO) from your preferred identity providers (such as Okta or OneLogin) to Zoho One. You can set up custom authentication for a specific user group or all users in the organization. ...
New to Zoho LandingPage?
Zoho LandingPage Resources