Security Enhancements | Migrate to the Updated Policies

Hello everyone,

Zoho Directory's security policies have been updated and reorganized into three new policies with features that enhance the overall organization security. These policies provide a stronger and more secure sign-in methods and improve the user authentication experience.

Earlier, security policies comprised four dedicated components: Password Policy, Multi-Factor Authentication (MFA), Allowed IPs, and Advanced Settings. Based on these components, each group was assigned a policy that determined their sign-in process. Depending on their roles and responsibilities, the sign-in method varied and upon successful authentication, users were granted access to Zoho Directory.

With the latest update, the policies are divided into three parts: Conditional Access Policies, Routing Policies, and Security Policies.

1. Routing Policies acts as an initial check when a user signs in. 
   
2. Conditional Access Policies determines whether the user's access should be allowed or denied based on the predefined criteria.
   
3. Security Policies provide you with a dedicated Password Policy and Session Settings.
   

Additionally, Custom Authentication has been renamed and is now a part of Routing Policies.

New Policies:

Conditional Access Policies | Routing Policies | Security Policies

To understand how your existing policies are handled and mapped to the new policies during the migration process, click here.

Before migrating to the updated policies, quickly review how the policies are changed.

Existing Policies	Updated Policies
Password Policy	Security Policies Password Policy is a part of Security Policy. Learn more.
Multi-Factor Authentication (MFA)	Conditional Access Policies Multi-Factor Authentication (MFA) is a part of Conditional Access Policies. MFA acts as an Action (Allow with MFA) under this policy. Learn more.
Allowed IPs	Conditional Access Policies Allowed IPs is a part of Conditional Access Policies. It acts as a condition (IP address) under the policy. Learn more.
Advanced Settings 1. WEB SESSION MANAGEMENT 2. LOCK PERIOD SETTINGS	1. Routing Policies Session Lifetime and Idle Session Timeout are a part of Session Settings under Routing Policies. Learn more. 2. Security Policies Concurrent Sessions, and Lock Period Settings are a part of Advanced Settings under Security Policies. Learn more.
Custom Authentication	Routing Policies This section is renamed as Identity Providers and can be enabled via Routing Policy. Learn more.

How to Migrate?

Existing users with pre-configured policies will come across the Migration Page, which guides them through reviewing, resolving the conflicts and adopting the new policies. On this page, you will be required to complete the steps before migrating.

1. Demo: Watch a quick demo to understand what’s changed and updated.
   
2. Read the Changes: View a detailed document that outlines all the updates.
   
3. New Admin Role: Configure the new admin role to replace the existing Helpdesk Admin role as it will no longer have permission to manage security operations.
   Note: This section is displayed only if at least one user is assigned to the Helpdesk Admin role.
   
4. Custom Admin Role: Review the changes in the custom roles. 
   
   Note: This section is displayed only if a custom security role has been created and assigned to a user.
5. Sandbox Mode: Preview the updated policies in sandbox mode before migrating

After completing these steps, you can proceed with migrating to the updated security policies.

FAQs

1. What happens if I don't migrate? 
   You can continue using the existing security policies (old version) until you migrate to the updated policies.
   
2. What will happen to my existing policies? 
   Your existing security policy configurations will be migrated to the new policy framework. To understand how your existing policy setup is mapped to the updated policies, click here.
   
3. Who can perform this migration? 
   Only the Organization Owner or Organization Admin can perform the migration.
   

Regards,

The Zoho Directory Team.

• Topic Participants

• Reena Rai N

  

• Recent Topics

• Issue connecting Zoho Mail to Thunderbird (IMAP/SMTP authentication error)

  Dear Zoho Support, I am trying to configure my Zoho Mail account on Thunderbird, but I keep getting authentication errors. Account: info@baktradingtn.com Domain: baktradingtn.com Settings used: IMAP: imap.zoho.com, Port 993, SSL/TLS, Normal Password SMTP:

• Payment issue with Mail Lite plan – personal NIF not accepted as payment info

  Hello, I have already contacted Zoho Support by email regarding this, but since I haven’t received any reply yet, I’m sharing it here as well to see if the community can help. I’m facing a payment issue for my Mail Lite plan. I have a personal account

• Customer payment alerts in Zoho Cliq

  For businesses that depend on cash flow, payment updates are essential for operational decision-making and go beyond simple accounting entries. The sales team needs to be notified when invoices are cleared so that upcoming orders can be released. In contrast,

• Figma in Zoho Creator

  Hi Team, I’m creating a form using Figma and would like to know how to add workflows like scheduling, custom validation, and other logic to it. Can anyone help me understand how to set this up for a Figma-based Creator UI form?

• Not receiving Gmail confirmation email to send emails as Zoho account from Gmail

  Hello! I'm having an issue with the "Send mail as" option on Gmail. I am not receiving the confirmation email on my Zoho Mail account. A few days ago, it worked, then it stopped, and now when I try to fix it, I simply don't receive the confirmation email

• Restore lost Invoice!

  Some time ago I tried to Upgrade from Invoice to Books. I not upgraded and staid n Invoice. Now i tried again and first i deleted the old trial of books. But now all is gone, PLEASE HELP!! i have no backup and i have to have at least 7 years data retention by law. 

• Zoho Desk Down

  Not loading

• lookup and integrated forms

  I might be misunderstanding things but I wanted to integrate our zoho crm contacts into creator. I imagined that when I used the integration it would mirror into creator. It did brilliant. BUT We have a ticket form in creator that we want to use a lookup

• Partially receive PO without partial Bill?

  Most of our inventory is pre-paid. Let's say we purchase 30 pieces of 3 different items for a total of 90 pieces. It is common for our supplier to send us the items as they are ready. So we will receive 30 pieces at a time. How can I partially receive

• 2 users editing the same record - loose changes

  Hello, I'm very new to Zoho so apology if this has been addressed somewhere i can't find. I have noticed the following: If we have 2 users put an inventory item in edit mode at the same time: say user1 click on edit and user2 while user1 is still in edit,

• How to get the Dashboard page to be the first page when you open the app

  So when it opens on a tablet or phone it opens on the welcome page, thanks.

• How I set default email addresses for Sales Orders and Invoices

  I have customers that have different departments that handle Sales Orders and Invoices. How can i set a default email for Sales Orders that's different than the default email for Invoices? Is there a way I can automate this using the Contact Persons Departments

• Formula fields not refreshing until page is reloaded

  I need help/advice about the formula fields and how I can refresh the information in real-time. We have two formula fields on our deals page which show calculated prices: One formula is in a subform which calculates the subform total + 1 other field amount

• How can I setup Zoho MCP with Chat GPT

  I can set up custom connections with Chat GPT but I cat an error when I try to set it up. The error is: "This MCP server can't be used by ChatGPT to search information because it doesn't implement our specification: search action not found" Thoughts?

• API ZOHO CRM Picket list with wrong values

  I am using Zoho API v.8. with python to create records in a custom module named "Veranstaltung" in this custom module I've got a picket list called "Email_Template" with 28 Values. I've added 8 new values yesterday, but if I try to use on of those values

• Group Emails

  I have synced Zoho CRM to Campaigns but there are certain email not synced. showing it is Group Emails, but this email ids belongs to different individuals. please provide a solution as i nedd to sync the same.

• Enable Password Import option in ulaa browser

  Dear Ulaa Team, I noticed that the Ulaa Password Manager currently offers an option to export passwords, but not to import them. This limitation poses a challenge for users like me who have stored numerous credentials in browsers like Chrome. Manually

• "Is Zoho CRM customer" vs "Is linked with Zoho CRM"

  Recently while building a Flow, I was setting up a Decision action following a Zoho Invoice Fetch record action. There were 2 choices that I had not seen as something I could manually action in Zoho Invoice: "Is Zoho CRM customer" and "Is linked with

• Client Script | Update - Introducing ZRC: Simplified HTTP request library

  Hello Developers! Are you tired of juggling different methods to make API calls? Are you confused with multiple syntaxes and version restrictions? Have you ever wished for one simple way to make all API calls in CRM? We heard you :) Here comes ZRC (Zoho

• Selection Filed for Data Export section

  Hi FSM Team, I hope you are all doing well. I would like to share an idea for future development based on my experience. Currently, in FSM, we can only download up to 5,000 records at a time. If the development team could add a selection option to choose

• What if I dont see contacts on the left side list

  My CRM does not show the contacts tab. In order to create list this is needed and I cant find it.

• Comments Vs. Replies

  I'm curious as to the difference between a "Reply" and a "Comment" on a ticket. It appears that "Replies" are what's used to determine response time SLA's and there are also used to automatically re-open tickets. I'm just trying to understand the key differences so I can educate both our clientele and our back-end users on which function/feature to use to better improve the ticket lifecycle. If anyone has any insight it would be appreciated. Thanks!

• Transitioning to API Credits in Zoho Desk

  At Zoho Desk, we’re always looking for ways to help keep your business operations running smoothly. This includes empowering teams that rely on APIs for essential integrations, functions and extensions. We’ve reimagined how API usage is measured to give

• Can you prevent closing Ulaa window when the last tab is closed (inadvertently)?

  Most browsers have started to bring this feature in to prevent closing their windows when the last tab is closed (inadvertently). I hope Ulaa should get this in too.

• Microsoft Phone Link

  Does anyone know if you can use Microsoft Phone Link to make calls through Zoho?

• Voip Phone system that integrates with Zoho

  Just checking to see if anyone could tell me what phone system they are using with Zoho that is on the list of systems that integrate with Zoho.  I use Vonage and have been with them for quite a few years but their service has really gone down hill and

• Removing Related Modules Lookup Fields Assignment / Relationship

  Issue: When creating a related list, I accidently selected module itself creating a circle reference. See attached. Situation: I wish to relating a custom module called "Phone Calls" to Leads and Contacts. Outcome: 1) I either want to remove the this

• Multiple email accounts, one phone

  Hi, I have my own businesses that use Zoho mail, now I would like to use zoho mail also for a local charity. But I noticed adding a phone number is compulsory for registering an account, and I only have one phone. This means I can not open an account because my phone number is already in use for another account. Can this be fixed? Thanks Vincent

• Kaizen #210 - Answering your Questions | Event Management System using ZDK CLI

  Hello Everyone, Welcome back to yet another post in the Kaizen Series! As you already may know, for the Kaizen #200 milestone, we asked for your feedback and many of you suggested topics for us to discuss. We have been writing on these topics over the

• Seriously - Create multiple contacts for leads, (With Company as lead) Zoho CRM

  In Zoho CRM, considering a comapny as a lead, you need us to allow addition of more than one contact. Currently the Lead Section is missing "Add contact" feature which is available in "Accounts". When you know that a particular lead can have multiple

• can I link a contacts to multiple accounts

  can I link a contacts to multiple accounts

• Free webinar! Digitize recruitment and onboarding with Zoho Sign and Zoho Recruit

  Hello, Tired of being buried in onboarding paperwork? With the integration between Zoho Sign and Zoho Recruit, a powerful applicant tracking system, you can digitize and streamline the entire recruitment and onboarding process, all from one platform.

• Open Activities view.

  I really like the new views for the open and closed activities inside the deals. But when you are in the tab view instead of the column view you can only complete and edit the open activity there isn't the 3 dot option to be able to delete the activ

• Potentially Outdated and Vulnerable Chromium Engine Installed by Ulaa Browser Installer

  I just installed Ulaa Browser a few minutes ago. Whats My Browser page shows I am using an outdated Chromium engine meaning I might be vulnerable for security exploits that might have got fixed in the new version.

• Potentially hardcoded list of Browsers to import from (after Ulaa Setup)

  I have just installed Ulaa Browser and found that the list of browser to import data is potentially hardcoded ones rather than looking at the system. I do not have FF, IE and Edge is not my default itself. I would appreciated if Ulaa detected my browsers

• From Layout to Code: Finding Custom Field IDs in Zoho Projects.

  Hello everyone! Ever found yourself wondering how to get the API names and IDs of custom fields in Zoho Projects while working on custom functions? Here’s a simple and effective way to do it! This method makes it super easy to locate the right field details

• Can I create multiple Zoho mail accounts?

  Hey there I've searched the FAQ for this but didn't find the answer I was looking for. I like to have a different e-mail address for personal stuff, for creating account on websites, and for online banking / e-commerce. Is it allowed to create three accounts for one person on Zoho? I already have one personal e-mail address, can I sign up two more times from the homepage? Thanks

• Employee type and source translation

  In Zoho People, when I fill in the employee’s information, there is the option to determine the type of employment (employee type) and the hiring source. Both options ALWAYS appear in English. It is extremely inconvenient to deal with poorly translated

• Sync Issue Between Zoho Notebook Web App on Firefox (PC) and Android App

  Hi Zoho Notebook Community, I'm facing a sync problem with Zoho Notebook. When I use the web version on Mozilla Firefox browser on my PC, I create and save new notes, and I've synced them successfully. However, these new notes aren't showing up in my

• Request for Clarity on Timeline for True GPT/Zia Auto-Response Capabilities

  I appreciate Zoho’s steady innovation, but I’m concerned that Desk and Zia remain well behind modern AI capabilities. For years, GPT-based tools have been able to generate and send contextual responses, yet Zoho Desk only supports summarization or suggested

• Next Page