Enhancements to Custom Connectors in Zoho Creator

Enhancements to Custom Connectors in Zoho Creator

Hello everyone,

At Zoho Creator, we believe in providing you with the necessary tools to achieve a well connected ecosystem of apps. Our Custom Connectors feature is a testament to this, enabling you to integrate with a wide range of external services beyond those available through built-in connectors.

While our built-in connectors already cover over 500 popular services (with new ones being added regularly), custom connectors take this a step further by allowing you to connect with virtually any third-party service.

To make this powerful feature even more robust and enterprise-ready, we've rolled out a series of enhancements designed to support advanced authentication methods, enable secure cloud integrations, and ensure seamless connectivity with external services. In this post, we'll walk you through the most recent updates:
  • OAuth 2.0 - Client authentication modes
  • AWS Signature authentication 
  • Bearer token authentication
Let's explore each in detail:

OAuth 2.0 - Client authentication modes

Different APIs have varying expectations for how client credentials should be presented during OAuth token exchange. Until now, our OAuth authentication type assumed a single client authentication method, and users faced issues when credentials had to be sent in the authorization header. To address this, we've introduced a new Client Authentication option for custom connectors using OAuth 2.0. This allows you to specify how your client credentials (Client ID and Client secret) are transmitted to the authorization server during the token request process. You can choose from two options:
  • Include in the form data (Default): This method adds your credentials to the form data submitted within the body of the request.
  • Include in the authorization header: This method places your credentials in the request's security header using HTTP basic authentication.
Why this matters
  • Improved compatibility with APIs that enforce strict authentication rules
  • Smoother integrations with enterprise-grade APIs
  • Reduced authentication errors

Example
Assume you want to integrate Zoho Creator with Reddit, a popular social media platform. The Reddit API uses OAuth 2.0 and its documentation explicitly states that client credentials must be sent in the Authorization header using basic authentication.

Now, when configuring your OAuth 2.0 custom connector in Zoho Creator, you can simply select Include in authorization header under the Client Authentication field. This ensures your authentication flow will work as expected, without any custom code or middleware.

AWS Signature authentication

The industry-standard authentication required to securely interact with AWS services is now supported in Zoho Creator. The new AWS Signature 4 authentication type within Custom Connectors enables you to integrate with AWS services without relying on any middleware or authentication workarounds. This unlocks the ability to connect to a wide range of popular AWS services (such as S3, Lambda, DynamoDB, and more) and perform the required actions.

Why this matters
  • Enterprise-grade security for applications that deal with critical workloads or sensitive data
  • Seamless automation of workflows with your existing AWS infrastructure from within Zoho Creator
  • Complies with AWS's Signature Version 4 method, which ensures robust security and maximum compatibility while authenticating requests to AWS services
Example
Consider a setup where your organization generates critical business documents using a Zoho Creator application. You may need to store these documents in their AWS S3 bucket for recordkeeping and auditing purposes.

With the introduction of the new AWS Signature authentication in Custom Connectors, you can easily connect to S3 by providing your AWS credentials and region. Then you can use the invokeURL task to transfer documents from Zoho Creator to your S3 bucket.

This enables seamless and secure integration with AWS, bringing the full power of AWS's cloud capabilities into your Creator apps.

Bearer token authentication

Zoho Creator now supports Bearer token authentication. Many third-party services, like GitHub and Slack, use this authentication type, which is a lightweight method that enables secure API calls without the need for full OAuth. Now you can seamlessly integrate these services into your applications using custom connectors.

Why this matters

  • Eliminates the need for complex setups associated with other authentication types, like OAuth, making it ideal for APIs that use token-based access
  • Enables faster, hassle-free integrations with internal tools, developer platforms, and microservices
Example
Assume your sales team relies on Slack for internal communication. With Bearer token authentication now supported in Zoho Creator, you can establish a custom connector with Slack. Then you call Slack's API using invokeURL to automatically post updates to a channel whenever a new lead is generated.

In essence, this is a simpler, more secure path to connect Creator with modern APIs from GitHub and Notion to your own internal systems.

Help documentation

We've updated our help resources to reflect the recent enhancements to Custom Connectors. For detailed information, please refer to the Understand Connectors page.

Bonus: mTLS in Zoho Creator

While we're on the topic of custom connectors, let's wrap things up with a platform-level security upgrade. For the first time in the Zoho ecosystem, Zoho Creator now supports Mutual Transport Layer Security (mTLS) across all integrations. mTLS is available for both built-in and custom connectors. 

mTLS provides an added layer of security by enabling certificate-based, two-way authentication and ensures that both the client and server verify each other's identity. 

Why this matters
  • Particularly valuable for enterprises operating in zero-trust environments
  • Helps meet compliance requirements, such as HIPAA, ISO 27001, GDPR, and other industry standards
Availability
mTLS is currently available only on demand. Please reach out to our support team if your integrations require mTLS-based authentication.

These powerful enhancements reaffirm Zoho Creator's commitment to helping you build deeply integrated, enterprise-grade business applications—and we'll continue enhancing the platform to support your evolving needs. Stay tuned for more updates coming soon!

Till then,
The Zoho Creator Team
    • Sticky Posts

    • Zoho Creator - 2023 Release Projection 1

      Hello everyone! A very Happy New Year to you and your family. Hope you're all good and having a great time using Zoho Creator to make your lives easier and your businesses prosper. 2022 was an action-packed year for us at Creator, and we hope to continue
    • Zoho Creator User Group meetups in a city near you! - Oct - Nov, 2023

      Greetings from the Zoho Creator team! We're hosting a series of Zoho Creator meetups in various cities across the globe, and we'd love to meet you there! Our meetups are a great opportunity to network with industry peers, exchange ideas and best practices,
    • Zoho Creator - 2023 Release Projection 2

      Hello everyone! Time truly flies when you're having an incredible journey, and today we mark the completion of an eventful and action-packed six months. It feels like just yesterday when we embarked on this adventure together with the launch of our new
    • Upcoming Updates - August 2022

      Hi all, Greetings from the Zoho Creator team! Today we've got news for you on some exciting updates. And rest assured— there’s more to come! In this post, we'll be going over the upcoming features and improvements for this month as mentioned below. A
    • Introducing Zoho Creator's v2 APIs

      Hello App Creators, Welcome to Zoho Creator's v2 APIs! This post will serve as the central point for migrating implementations of Creator's current APIs (v1) to v2. Improvements that v2 brings OAuth-based authentication, which is more secure than the

    Nederlandse Hulpbronnen


      • Recent Topics

      • Try FSM again for our business

        We already have our customers individual equipment in CRM with serial numbers, install dates, warranty length and importantly next service which is generally 2 years. a month before the service date is due we get get a report and send out service reminders.
      • Introducing Assemblies and Kits in Zoho Inventory

        Hello customers, We’re excited to share a major revamp to Zoho Inventory that brings both clarity and flexibility to your inventory management experience! Presenting Assemblies and Kits We’re thrilled to introduce Assemblies and Kits, which replaces the
      • Customer Parent Account or Sub-Customer Account

        Some of clients as they have 50 to 300 branches, they required separate account statement with outlet name and number; which means we have to open new account for each branch individually. However, the main issue is that, when they make a payment, they
      • Prevent stripping of custom CSS when creating an email template?

        Anyone have a workaround for this? Zoho really needs to hire new designers - templates are terrible. A custom template has been created, but every time we try to use it, it strips out all the CSS from the head.  IE, we'll define the styles right in the <head> (simple example below) and everything gets stripped (initially, it saves fine, but when you browse away and come back to the template, all the custom css is removed). <style type="text/css"> .footerContent a{display:block !important;} </style>
      • Workdrive 5.0 / API Documentation Workflows

        Hi Zoho, When will the API documentation of the workflows be published? We are interested in using it to trigger manual workflows from an external application. Greetings, Justin
      • Error: Unsupported content type: text/html;charset=UTF-8 after tryeing to get the token for n8n automation

        I am working on ZOHO Desk automation and need to get the ZOHO auth token for n8n I have created the app in ZOHO Desk API, got client id and client secret. Added all data required to get a token in n8n. After I sign in with my ZOHO credentials in ZOHO
      • Replace Lookup fields ID value with their actual name and adding inormation from subforms

        Hi everyone,  I wanted to see if someone smarter than me has managed to find any solutions to two problems we have. I will explain both below.  To start we are syncing data from Zoho CRM to Zoho Analytics and I will use the Sales Order module when giving
      • Webhook from Zobot to Zoho Flow fails

        I'm trying to connect from zobot to zoho flow. When testing in zflow, I am receiving all entered data from the connector correctly. The SalesIQ connector's "outputreaction" is {} (is this normal or is there a problem?). But as soon as I try my chat bot
      • Transition from Sole Proprietorship to GmbH (Limited Liability Company) – Best Approach in Zoho Books / Zoho One

        Hello everyone, I am currently operating under a Zoho One plan with a sole proprietorship in Switzerland. As of January 1st, 2026, I will be incorporating a new legal entity – a GmbH (Swiss equivalent of a Limited Liability Company). While the business
      • Presenting ABM for Zoho CRM: Expand and retain your customers with precision

        Picture this scenario: You're a growing SaaS company ready to launch a powerful business suite, and are looking to gain traction and momentum. But as a business with a tight budget, you know acquiring new customers is slow, expensive, and often delivers
      • Best way to display complex Bookings Consultation Descriptions on Zoho Site?

        I am a new user so apologies if this has been asked before. I couldn't find any answers in the forum. We offer 18 complex Consultations to our subscribers. Our current platform lets me put detail on these Consultations thoroughly (200-300 words) during
      • No Response from Zoho Support in 8 Days - Typical?

        I have a couple of issues I'm trying to work through. Initially, I was getting support from support@zohofsm.com, but I have not received a response in 8 days (11 on another question). Is this typical? Can I pay for support? For context, I am not spamming
      • Cliq iOS can't see shared screen

        Hello, I had this morning a video call with a colleague. She is using Cliq Desktop MacOS and wanted to share her screen with me. I'm on iPad. I noticed, while she shared her screen, I could only see her video, but not the shared screen... Does Cliq iOS is able to display shared screen, or is it somewhere else to be found ? Regards
      • Age Calculation

        I've attempted to calculate the age of someone based on their birthday input by using the formula field. It works but I don't want all those decimals on there. I then tried to use "set variable" after birthday input but I get a field type mismatch, long vs. floating. Any ideas would be wonderful.
      • Access Denied

        I am iOS Developer and updating our clients project and shifted ZohoDeskPortalCore SDKs from cocoapods to SPM and changed few lines of code but now i am get access denied, the help center app is unavailable. please contact administrator.
      • Using Zoho Desk to support ISMS process

        Hi, I am evaluating using Zoho Desk for security incident management. This seems to be aligned with Zoho Desk purpose as its just another type of incident. However in security incident management, ideally I can link incidents (tickets) with a risk from
      • Filtering Tickets based on Email headers

        We're starting to get a lot more junk coming into our Zoho Desk, which is then triggering unnecessary email alerts to agents. Once thing we could do to cut this junk in half, is to filter tickets based on email headers. Any email containing the `List-Unsubscribe`
      • Field Dependency Not Working on Detail Page in Zoho Desk

        Hi Support Team, I’ve created field dependencies between two fields in Zoho Desk, and they are working correctly on the Create and Edit layouts. However, on the Detail page, the fields are not displaying according to the dependencies I’ve set — they appear
      • TaxJar vs Avalara

        Hi, I'm evaluating adoption of a sales-tax service for US based business. Anyone else have experience with TaxJar and Zoho Books? I am a Zoho One subscriber so anticipate needing to use Flow to make this work. It seems like Avalara are simply too expensive
      • How to check Leads with no Task (open activity)

        Hi everyone, I was wondering if there’s a way to view leads that don’t have any tasks assigned or open activities linked to them.
      • What can we do on our end to improve the Answer bot answers?

        Hi, I'm using the Answer bot card in the Codeless bot builder. I've input several questions and their answers in the FAQ section to feed the Answer bot. The text is all in French, as this is the language our customers communicate in. I've tried testing
      • Zoho Books Sandbox environment

        Hello. Is there a free sandbox environment for the developers using Zoho Books API? I am working on the Zoho Books add-on and currently not ready to buy a premium service - maybe later when my add-on will start to bring money. Right now I just need a
      • Taxes for EU B2B Transactions

        Currently, ZC doesn't seem to have a procedure for validating VAT numbers of businesses purchasing in another EU state, and removing local VAT is valid.  This is essential for all inter EU B2B trade.
      • Zoho Down

        I have a drop in my Zoho One services.
      • Issue with Inline Images in Email Reply via Zoho Desk API

        Hi, I am attempting to send inline images in an email reply using the Zoho Desk API, but the images are not being displayed inline for the recipient. I have followed this documentation: https://desk.zoho.com/DeskAPIDocument#Uploads https://desk.zoho.com/DeskAPIDocument#Threads#Threads_SendEmailReply
      • How to upload file to Connect using API?

        Hi there. I looked at the API documentation and nowhere did it mention how to use the API method to upload a file even though it is mentioned that it is possible to be done so. Please help.
      • Problem for EU users connecting Zoho CRM through Google Ads for Enhanced conversions

        Has anyone else experienced this problem when trying to connect Zoho CRM through Google Ads interface to setup enhanced conversions? Did you guys get it fixed somehow? The Problem: The current Google Ads integration is hardcoded to use Zoho's US authentication
      • How can I setup Zoho MCP with Chat GPT

        I can set up custom connections with Chat GPT but I cat an error when I try to set it up. The error is: "This MCP server can't be used by ChatGPT to search information because it doesn't implement our specification: search action not found" Thoughts?
      • Group Tax in Service Line Items

        Hi FSM Team! I noticed that when you update a tax in the service line item the group tax is not showing up as an option. Let me know what can be done thank you!
      • Zoho Campaigns - Why do contacts have owners?

        When searching for contacts in Zoho Campaigns I am sometimes caught out when I don't select the filter option "Inactive users". So it appears that I have some contacts missing, until I realise that I need to select that option. Campaigns Support have
      • FSM Improvement Idea - Show an Import button when there is no data

        I am setting up FSM for a client and I noticed that there is no option to import data, see screenshot below. Even when you click Create Contact there is only an option to Import from Zoho Invoice. It is only after you add at lease 1 record that the Import
      • Whatsapp Limitation Questions

        Good day, I would like to find out about the functionality or possibility of all the below points within the Zoho/WhatsApp integration. Will WhatsApp buttons ever be possible in the future? Will WhatsApp Re-directs to different users be possible based
      • Zoho FSM API Delete Record

        Hi FSM Team, It would be great if you could delete a record via API. Thank you,
      • Insert auto number from main form into subform rows

        Hello. I'm trying to take from my main form "order number" which i have setup as an auto generated number into every line created in my subform. So when a row is created in my subform i want the "order number " from the main form to be inserted automatically.
      • Adding a developer for editing the client application with a single user license

        Hi, I want to know that I as a developer I developed one application and handed over to the customer who is using the application on a single user license. Now after6 months customer came back to me and needs some changes in the application. Can a customer
      • Function #4: Schedule Customer Statements

        Regularly sending statements to customers is an imperative part of many business processes as it helps foster strong customer relationships and provides timely guidance on payments. While you can generate the statement of accounts and have it sent over
      • Limiting search or dependencies with an asterisk "*".

        I have a form with several dependency fields with options still developing for each field. Since these options were developing and not yet ready to be a selection in the field, I placed a filter for the dropdown field. In this filter, I selected fields
      • Collaps Notes

        There are times when long/large notes are added to a record i.e. Accounts or Deals etc. Currently, the full note is displayed in the notes related list section. It would be great if by default only 5 to 10 rows of the note are displayed when the note
      • Improved RingCentral Integration

        We’d like to request an enhancement to the current RingCentral integration with Zoho. RingCentral now automatically generates call transcripts and AI-based call summaries (AI Notes) for each call, which are extremely helpful for support and sales teams.
      • How to overcome limitations in meetings

        As a company, one of our deliverables is a meeting between two other companies, where we act as facilitators. So, if we recorded this meeting  in Zoho CRM, it should be connected to 2 accounts, 2 contacts, and 1 campaign (a campaign, in our use, is the
      • Next Page