Prerequisites:
When you're done with the prerequisites, add Zoho Vault as an application in:
- Okta
- OneLogin
Okta Integration
The integration follows three main steps:
- Adding Zoho Vault in Okta
- Configuring Okta details in Zoho Vault
- Assigning Zoho Vault to users in Okta
Adding Zoho Vault in Okta (IdP)
- Log in to your Okta account with admin privileges.
- Select Applications from the Applications tab.
![](https://desk.zoho.com/DocsDisplay?zgId=4241905&mode=inline&blockId=etk3u177e9cf2dd8d4a60927dc14946238fdb)
- Click Add Application.
![](https://desk.zoho.com/DocsDisplay?zgId=4241905&mode=inline&blockId=etk3u31a5353fdc7842dc8cb8a2e50a5dff87)
- Click Create New App.
- Set Platform as Web and Sign on method as SAML 2.0, then click Create.
![](https://desk.zoho.com/DocsDisplay?zgId=4241905&mode=inline&blockId=etk3ue70cb99e6343446fbc9eb9214fc3c227)
- Enter the application name as Zoho Vault under General Settings, then click Next.
![](https://desk.zoho.com/DocsDisplay?zgId=4241905&mode=inline&blockId=etk3uf425e8061ada440986983c0417820c75)
- Enter the service provider (Zoho Vault) details in Okta as described below, then click Next.
Note: Replace <YOUR-ORG-ID> with your unique ORG ID.
- Logout URL - https://accounts.zoho.com/logout/samlsp/<YOUR_ORG_ID>
- Audience URI (SP Entity ID): zoho.com
- Default RelayState: aHR0cHM6Ly92YXVsdC56b2hvLmNvbV9fSUFNX19ab2hvVmF1bHQ=
- Name ID format: EmailAddress
- Application username: Email
![](https://desk.zoho.com/DocsDisplay?zgId=4241905&mode=inline&blockId=etk3u2ede4a604ff64f879fa70d0d5a71ffdd)
- Select I'm an Okta customer adding an internal app, then click Finish.
![](https://desk.zoho.com/DocsDisplay?zgId=4241905&mode=inline&blockId=etk3ueadf1195f6194ac48a8c555c75d35a13)
- Select Sign On, then click View Setup instructions. A new tab will open, containing the details required to configure SAML 2.0 in Zoho Vault.
![](https://desk.zoho.com/DocsDisplay?zgId=4241905&mode=inline&blockId=etk3uda7529e0bb994d5789a3bfa841c61720)
Configuring Okta details in Zoho Vault
- Log in to your Zoho Vault account, then select Settings.
- Select AD/LDAP Integration from the Integrations section, then click SAML Configuration.
- Enter the identity provider details accordingly.
- To automatically create new Zoho accounts when users authenticate with Zoho Vault through Okta, enable Just in time provisioning.
- Click Save and Enable.
![](https://desk.zoho.com/DocsDisplay?zgId=4241905&mode=inline&blockId=etk3u089f3e0f67ce4d6f8d24cb05acc297ec)
Assigning Zoho Vault to users in Okta
- Select Applications, then click Assign Applications in Okta.
![](https://desk.zoho.com/DocsDisplay?zgId=4241905&mode=inline&blockId=etk3u7594e79abc4446bda9cc54cd702acf44)
- Under People, select the desired users and confirm assignments.
![](https://desk.zoho.com/DocsDisplay?zgId=4241905&mode=inline&blockId=etk3ucc7d9f97ddb443b786c93888f943fb3c)
This completes the setup. Your users can now access Zoho Vault directly from Okta.
OneLogin Integration:
The integration follows two main steps:
- Adding Zoho Vault in OneLogin
- Configuring OneLogin details in Zoho Vault
Adding Zoho Vault in OneLogin
- Log in to your OneLogin account as an admin.
- Select Applications, then click Add app.
![](https://desk.zoho.com/DocsDisplay?zgId=4241905&mode=inline&blockId=etk3u465b7522358e4c60951556ba68c0f032)
- Search for SAML test connector, then select SAML test connector (advanced).
![](https://desk.zoho.com/DocsDisplay?zgId=4241905&mode=inline&blockId=etk3uc3421d042ac3467781806011b6faed43)
- Set the Display name as Zoho Vault, then click Save.
![](https://desk.zoho.com/DocsDisplay?zgId=4241905&mode=inline&blockId=etk3uea1de1df3a494494866bcd2942e13b79)
- Select Configuration from the side panel, then enter zoho.com under the Audience field.
- Enter the following details in the corresponding fields.
RelayState - aHR0cHM6Ly92YXVsdC56b2hvLmNvbV9fSUFNX19ab2hvVmF1bHQ=
Recepient - https://accounts.zoho.com/signin/samlsp/<YOUR_ORG_ID>
ACS (Consumenr) URL Validator - https://accounts.zoho.com/signin/samlsp/<YOUR_ORG_ID>
ACS (Consumenr) URL - https://accounts.zoho.com/signin/samlsp/<YOUR_ORG_ID>
Logout URL - https://accounts.zoho.com/logout/samlsp/<YOUR_ORG_ID>
![](https://desk.zoho.com/DocsDisplay?zgId=4241905&mode=inline&blockId=etk3u0fdfd3856ee8457e8acb9c2462ad7ff9)
![](https://img.zohostatic.com/zde/static/images/file.png)
Note:
- Replace zoho.com with zoho.eu | zoho.in | zoho.com.cn | zoho.com.au to match your corresponding domain.
- Replace <YOUR-ORG-ID> with your unique ORG ID.
- Select More actions, then click SAML Metadata to download the metadata file. You will have to upload it to Zoho Vault later.
- Click Save.
- Select SSO from the side panel and make a note of these details to later add to Zoho Vault.
![](https://desk.zoho.com/DocsDisplay?zgId=4241905&mode=inline&blockId=etk3ub8f94eb8ebec4863a344e63dbc6805c5)
- Manage access to Zoho Vault and user privileges from the Access, Users, and Privileges tabs in the side panel, respectively.
- Click Save.
Configuring OneLogin details in Zoho Vault
- Log in to your Zoho Vault account, then select Settings.
- Select AD/LDAP Integration from the Integrations section, then click SAML Configuration.
- Enter the identity provider details you made a note of in step 9.
- To automatically create new Zoho accounts when users authenticate with Zoho Vault through OneLogin, enable Just in time provisioning.
- Click Save and Enable.
![](https://desk.zoho.com/DocsDisplay?zgId=4241905&mode=inline&blockId=etk3ucf3503322d9b4890941eae9ba8e95879)
This completes the setup. Your users can now access Zoho Vault directly from OneLogin.