Auth0 - SAML Integration

Auth0 - SAML Integration

Prerequisite: Your Member Portal feature must be enabled first, and SAML must be selected as the sign-in method.

To set up an Auth0 account:

  1. Log in to your Auth0 account. If you don't have an existing account, you must create one.
  2. Click Applications.
  3. Click + Create Application.



  4. Enter a name for your application.
  5. Choose an application type. The preferred type is Regular Web Applications.
  6. Click Create.



  7. The app you created will be displayed. Select Settings from the top menu bar. You can obtain the Domain and Client ID from here.




  8. Scroll towards Application URIs and paste the ACS URL fetched from your Zoho Sites screen in the Allowed Callback URLs. 



  9. Allowed Logout URLs should be the live published URL of the site created in Zoho Sites. Please use "http" not "https" protocol in the URL. Example: http://ckdemo.zohosites.com
  10. Click Save Changes at the bottom of the page.



  11. Click the Addons tab. Enable the SAML2 Web App toggle.



The SAML2 Web App will open. Under the Settings tab, the Application Callback URL will be auto-fetched from the previously provided data. Paste the provided code into the Settings field in Auth0 (Settings tab > Settings field) and click Save


Notes
{
"mappings": {
"given_name": "User.FirstName",
"family_name": "User.LastName"
},
"createUpnClaim": false,
"passthroughClaimsWithNoMapping": false,
"mapUnknownClaimsAsIs": false,
"mapIdentities": false,
"nameIdentifierFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress",
"nameIdentifierProbes": [
],
"logout": {
"callback": "{{PUBLISHED_DOMAIN}}",
"slo_enabled": true
},
"binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
}
Change the {{PUBLISHED_DOMAIN}} to user's published domain. 

  1. Under the Usage tab, download the Auth0 certificate. The downloaded certificate will be a .pem file.
  2. Copy the Identity Provider Login URL from the Auth0 application and paste it onto Zoho Sites as both the Login URL and Change password URL. 
  3. Click the Get key from file hyperlink to upload the .pem file downloaded from the previous step.


  4. For the logout URL, use the following format:
    Give the URL as https://YOUR_AUTH0_DOMAIN/samlp/{{CLIENT_ID}}/logout
    Example : https://dev-tqgtpgf3yz8u2ey7.us.auth0.com/samlp/OGqE9fnRYTKtzpXPxvnFhRbovsUlu9kB/logout
    Where,
    CLIENT_ID: The Client ID obtained from the Auth0 Settings page.
    Your_AUTH0_DOMAIN: The Domain obtained from the Auth0 Settings page.
  5. After providing all the necessary URLs, select RSA as the algorithm from the dropdown, and click Save in Zoho Sites. 




  6. .

    When signing in, your end users will be redirected to Auth0's sign-in page