Security Enhancements | Migrate to the Updated Policies

Hello everyone,

Zoho Directory's security policies have been updated and reorganized into three new policies with features that enhance the overall organization security. These policies provide a stronger and more secure sign-in methods and improve the user authentication experience.

Earlier, security policies comprised four dedicated components: Password Policy, Multi-Factor Authentication (MFA), Allowed IPs, and Advanced Settings. Based on these components, each group was assigned a policy that determined their sign-in process. Depending on their roles and responsibilities, the sign-in method varied and upon successful authentication, users were granted access to Zoho Directory.

With the latest update, the policies are divided into three parts: Conditional Access Policies, Routing Policies, and Security Policies.

1. Routing Policies acts as an initial check when a user signs in. 
   
2. Conditional Access Policies determines whether the user's access should be allowed or denied based on the predefined criteria.
   
3. Security Policies provide you with a dedicated Password Policy and Session Settings.
   

Additionally, Custom Authentication has been renamed and is now a part of Routing Policies.

New Policies:

Conditional Access Policies | Routing Policies | Security Policies

To understand how your existing policies are handled and mapped to the new policies during the migration process, click here.

Before migrating to the updated policies, quickly review how the policies are changed.

Existing Policies	Updated Policies
Password Policy	Security Policies Password Policy is a part of Security Policy. Learn more.
Multi-Factor Authentication (MFA)	Conditional Access Policies Multi-Factor Authentication (MFA) is a part of Conditional Access Policies. MFA acts as an Action (Allow with MFA) under this policy. Learn more.
Allowed IPs	Conditional Access Policies Allowed IPs is a part of Conditional Access Policies. It acts as a condition (IP address) under the policy. Learn more.
Advanced Settings 1. WEB SESSION MANAGEMENT 2. LOCK PERIOD SETTINGS	1. Routing Policies Session Lifetime and Idle Session Timeout are a part of Session Settings under Routing Policies. Learn more. 2. Security Policies Concurrent Sessions, and Lock Period Settings are a part of Advanced Settings under Security Policies. Learn more.
Custom Authentication	Routing Policies This section is renamed as Identity Providers and can be enabled via Routing Policy. Learn more.

How to Migrate?

Existing users with pre-configured policies will come across the Migration Page, which guides them through reviewing, resolving the conflicts and adopting the new policies. On this page, you will be required to complete the steps before migrating.

1. Demo: Watch a quick demo to understand what’s changed and updated.
   
2. Read the Changes: View a detailed document that outlines all the updates.
   
3. New Admin Role: Configure the new admin role to replace the existing Helpdesk Admin role as it will no longer have permission to manage security operations.
   Note: This section is displayed only if at least one user is assigned to the Helpdesk Admin role.
   
4. Custom Admin Role: Review the changes in the custom roles. 
   
   Note: This section is displayed only if a custom security role has been created and assigned to a user.
5. Sandbox Mode: Preview the updated policies in sandbox mode before migrating

After completing these steps, you can proceed with migrating to the updated security policies.

FAQs

1. What happens if I don't migrate? 
   You can continue using the existing security policies (old version) until you migrate to the updated policies.
   
2. What will happen to my existing policies? 
   Your existing security policy configurations will be migrated to the new policy framework. To understand how your existing policy setup is mapped to the updated policies, click here.
   
3. Who can perform this migration? 
   Only the Organization Owner or Organization Admin can perform the migration.
   

Regards,

The Zoho Directory Team.

• Topic Participants

• Reena Rai N

  

• Recent Topics

• Remember all the ways we've posted?

  The world celebrates World Postal Day in 2025 with the theme “#PostForPeople: Local Service. Global Reach". The story of the “post” is a story of human connection itself, evolving from simple handwritten notes carried over long distances to instant digital

• Can no longer upload my own Notebook cover

  I've had Notebook for over a year and have been able to create my own notebook covers, but when I tried to upload my own cover for a new notebook today, the upload feature has suddenly been starred, requiring me to upgrade my account. When did this

• Zoho Desk - Cannot Invite or Register New User

  Hi who may concern, we encountered a problem that we cannot invite user or the visitor cannot register for a user at all through our help center portal, with the snapshot shown as below and the attachement. It always pops up that "Sorry, Unable to process

• Custom domain issue

  I recently changed records for my support area custom domain for a few months, I then wanted to come back to Zoho, but now I can't connect it and I can't login as it's having an SSL issue. I cannot get a good response from support, as I've been notified

• How do you generate personalized certificates and save them in dynamic folders using Writer's mail merge?

  Zoho Writer's mail merge feature can help you enhance the certificate management process. It's a great way to save time and effort! Merge certificates and maintain a well-organised repository with personalised certificates stored in separate folders for

• Zoho Editor

  Zoho PDf Editor is not working I am clicking on EDIT PDf then it again bringing me back to the same page. again and again.

• The present is a "present"

  The conversation around mental health has been gaining attention in recent years. Even with this awareness, we often feel stuck; the relentless pace of modern life makes us too busy to pause, reflect, and recharge. In the world of customer support, this

• Market cap

  Market cap formula?? Kaise nikale

• Create project (flow) and assign to person without account (company)

  Hi Zoho Support & Community, I'm trying to automate a process using Zoho Flow to create a Zoho Project and link it directly to a Zoho CRM Contact. This reflects our B2C workflow where we primarily deal with individual Contacts, not Companies/Accounts.

• Mail and OS

  Jai Hind! Zoho is doing good by creating good software (made in india) on par with other tech giants. 🥰 Suggestion: 1. Whenever we sign up on zoho mail its asking for other mail id. It shouldn't be like that. You should ask general details of a user

• Need Help to setup plugs along with codeless bot buidler. To send sms OTPs to users via Zoho Voice and to verify it

  Need Help to setup plugs along with codeless bot buidler. To send sms OTPs to users via Zoho Voice and to verify it. I get leads from our website and we need to make sure those are not junk. So we are using proactive chat bot and we need mobile OTPs to

• Direct Integration Between Zoho Cliq Meetings and Google Calendar

  Dear Zoho Team, We’d like to submit the following feature request based on our current use case and the challenges we’re facing: 🎯 Feature Request: Enable meetings scheduled in Zoho Cliq to be automatically added to the host's Google Calendar, not just

• Zoho sheet

  Unable to share zoho sheet with anyone on internet with editer option only view option is show

• Personal account created under org account

  Hi there, I am Jayesh. We are using ME Central, and we have an account by the email ID soc@kissht.com.. Now I have created a personal account., jayesh.auti@zohomail.in, accidentally. Can you help me to remove this jayesh.auti@zohomail.in from my organization

• Add another account

  How to add another mail account to my zoho mail.

• Recover deleted user

  Hi by mistake i have deleted an added user and his email associated. Please help me recover it thank you.

• No connection to the server

  Hello! I can't add a new email address to my mailbox because your server is rejecting me. Please help. I took and added a screenshot of this problem Marek Olbrys

• Emails missing from desktop but visible on phone

  Subject says it all. Windows 11 laptop. Apple phone. all systems up to date.

• Website Hosting

  Hello, I want to host my domain on Hostinger, and I want my emails to run through Zoho Mail. Please provide me with the SPF record, MX record (Type: TXT), and A record, so that I don’t face any issues with my emails. My website is on Hostinger hosting,

• Can not search zoho mail after update V.1.7.0

  i can not search mail on to and cc box from attached picture and then search contacts box can't click or use anything. include replay mail too.

• How to retreive the "To be received" value of an Item displayed in Zoho inventory.

  Hi everyone, We have our own Deluge code to generate a PO according to taget quantity and box quantity, pretty usefull and powerful! However, we want to reduce our quantity to order according to "To be received" variable. Seems like this might not even

• Kaizen #211 - Answering your Questions | Using Canvas and Widgets to Tailor CRM for Mobile

  Howdy, tech wizards! We are back with the final post in addressing the queries you shared for our 200th milestone. This week, we are focusing on a couple of queries on Zoho CRM mobile configurations and custom payment gateway integration. 1. Mobile SDK

• Remove "Invalid entries found. Rectify and submit again" modal

  Following up on a post from a few years back, but can the Zoho team consider either removing the 'Invalid entries found. Rectify and submit again' modal that displays for empty mandatory fields OR allow an admin to change it? I've built a custom error

• Cadence reports as front-end reports

  Hello everyone, We have built a cadence which is connected to the Leads module. There are 11 steps in total, 7 are automatic emails and 4 are tasks for the Lead owners. As admins, we have access to this (very nicely made) 'View Reports' tab where we can

• Show elapsed time on the thank-you page?

  Is it possible to display the total time a user spent filling out a Zoho Form on the thank-you? I’d like to show the difference between the `form submission timestamp` and the `start time` (currently have a hidden Date-Time field set to autofill the date

• I need to do crud with snippet html

  I need to implement a form with an improved user interface. I would like to use snippets to build a CRUD that allows me to create and update records. How could I achieve this using snippets?

• Incorrect “correct” password on email client apple mail

  I have troubleshot this account several times. I have deleted and re added account. It keeps saying incorrect password. Can you check that it is not locked on your end?

• Is it possible to lock editing subform rows?

  Ideally editing would only be locked after the form has been updated but I still want them to be able to add new subform records at any time and they should be able to delete rows from the subform. It is a named subform if that's relevant however the

• What is the maximum file size of a video upload in Zoho chat?

  Can I upload a 20 mb video file and share it with my colleagues? 

• Update a field in ALL all calls under a contact

  HI guys! I have written some deluge code to update a field in my calls after i have comepleted the call, i need this field to update in all my scheduled calls as well that are comeing up. I just cant seem to get it to work, i have put teh code below,

• Verifying Zoho Mail Functionality After Switching DNS from Cloudflare to Hosting Provider

  I initially configured my domain's (https://roblaxmod.com/) email with Zoho Mail while using Cloudflare to manage my DNS records (MX, SPF, etc.). All services were working correctly. Recently, I have removed my site from Cloudflare and switched my domain's

• Fat Download of Ulaa Browser

  I just observed that Ulaa Browser is offering an one-capsule big download. These days it is a custom to offer a small bootstrap downloader and based on user customization options an appropriate download completes. And this is particularly common with

• Billing Management: #8 Usage Billing in Logistics & Delivery Services

  The logistics and delivery industry thrives on movement and precision. Every delivery completed, every kilometre driven, and every ton transported is a measurable activity. However, billing often lags behind. Many logistics companies still rely on fixed-rate

• Tags for New Tickets

  Hi there, When creating a new ticket, there is currently no way to choose a tag you would like to associate with the new ticket. Being able to associate a tag while creating a new ticket will be very beneficial as it will save time and flow well with

• Zoho Desk: No Incoming email

  Is Zoho Desk services down? No incoming email reflect to desk tickets.

• Zoho CRM - Widgets | Update #3 : Introducing SDK V1.5 along with new ZDK Methods and ZRC Support

  Hello everyone! Widgets in Zoho CRM just got a big upgrade! With the release of SDK v1.5, developers can now create more immersive widget experiences. This update elevates Widget development with new ZDK methods for easier interactivity and ZRC support

• Unusual activity detected, account blocked

  I am unable to send emails and am getting the error "Outgoing blocked: Unusual activity detected. To unblock your account, please and submit a request. Learn more.". I am unsure as to why this is happening since all my activity is legitimate, mainly confirmation

• Unable to Send Emails – Outgoing Mail Blocked (Error 554 5.1.8)

  Description: Hello Zoho Support Team, I am facing an issue with my Zoho Mail account ( admin@osamarahmani.tech ). Whenever I try to send an email, I get the following error: 554 5.1.8 Email Outgoing Blocked I would like to clarify that I have not done

• Issue connecting Zoho Mail to Thunderbird (IMAP/SMTP authentication error)

  Dear Zoho Support, I am trying to configure my Zoho Mail account on Thunderbird, but I keep getting authentication errors. Account: info@baktradingtn.com Domain: baktradingtn.com Settings used: IMAP: imap.zoho.com, Port 993, SSL/TLS, Normal Password SMTP:

• Payment issue with Mail Lite plan – personal NIF not accepted as payment info

  Hello, I have already contacted Zoho Support by email regarding this, but since I haven’t received any reply yet, I’m sharing it here as well to see if the community can help. I’m facing a payment issue for my Mail Lite plan. I have a personal account

• Next Page