Portal SSO without setting up SAML IDP
I see that custom SAML integration is available for letting
customers access their portal in Subscriptions. That's nice, but a lot
more complicated than it needs to be.
All
that's required for secure customer portal access would be an API
endpoint that would allow us to obtain a single-use URL for that one
customer, e.g.
https://subscriptions.zoho.com/portal/org/customer_id?token=WlkZmBtamlhYHd2Jz9xd3BgeCUl.
That token could expire in a reasonable period of time (5 minutes?),
and following that URL (perhaps by just dropping it into an iframe in
our app) would allow the user to access their portal without any
authentication whatsoever.
Just an idea; hopefully it shows up in a future release! :-)