Better docs for SAML IdP
we've gone through some back and forth while setting up SAML SSO for Zoho One with Azure AD (MS 365).
it is quite a common case that enterprises want to use their existing MS auth instead of Zoho password and I think the docs would benefit from some improvements.
1// there is a detailed guide about how to setup SAML in Zoho Accounts: https://help.zoho.com/portal/en/kb/accounts/manage-your-organization/saml/articles/access-zoho-via-azure#A_Create_an_app_in_Azure
- while this page is a nice and detailed guide, for One admins it's generally better to follow the second method detailed in...
2// a separate documentation how to set up SAML in Zoho One in which case it's named custom IdP https://help.zoho.com/portal/en/kb/one/admin-guide/custom-authentication/setting-up-custom-authentication-with-popular-idps/articles/zohoone-customauthentication
- this method is more flexible as one can enable SAML for individual users or groups.
3// MS hosted docs: https://learn.microsoft.com/en-us/azure/active-directory/saas-apps/zohoone-tutorial
suggestions:
- the first two documentation sources should be interlinked
- it's even easy / possible to lock yourself out when following the steps in 1// as it instantly enables SAML for everyone in the org. if you want to disable SAML afterwards you'll have to go through the (new) SAML flow. if there is something incorrect in your config (e. g. SAML certificate) all users end up being locked out including the super admin which ends up in a loop if wanting to disable SAML. Zoho might want to rethink this case from a product perspective.
- the information on MS hosted docs is slightly different in creating the SSO App in Azure, any chance to unify this?
- specifically for Azure, according to the docs site the SAML identifier (Entity ID) reflects the data center (one.zoho.com, one.zoho.eu, one.zoho.in) etc. in my exprience this is not true and it's always one.zoho.com regardless of the DC.
hope this helps.
Topic Participants
David
Ajay Piriyadharshan K
Sticky Posts
How to Add Users to your Organization in ZohoMail?
A better clarity so you can create other users to start using Zoho Mail. You can directly Add Users from the Control Panel to your Organization. You can invite users with the existing email address. If the person (user) already uses ZohoCRM, then you can import users from Zoho CRM. You can also import them using a .csv file. (if you are planning to add them in Bulk) In this topic, We will be discussing on how to Add and Invite users only. The Import options are self explanatory. ____________________________________________________________________________________________________________