Enhancements to Custom Connectors in Zoho Creator

Enhancements to Custom Connectors in Zoho Creator

Hello everyone,

At Zoho Creator, we believe in providing you with the necessary tools to achieve a well connected ecosystem of apps. Our Custom Connectors feature is a testament to this, enabling you to integrate with a wide range of external services beyond those available through built-in connectors.

While our built-in connectors already cover over 500 popular services (with new ones being added regularly), custom connectors take this a step further by allowing you to connect with virtually any third-party service.

To make this powerful feature even more robust and enterprise-ready, we've rolled out a series of enhancements designed to support advanced authentication methods, enable secure cloud integrations, and ensure seamless connectivity with external services. In this post, we'll walk you through the most recent updates:
  • OAuth 2.0 - Client authentication modes
  • AWS Signature authentication 
  • Bearer token authentication
Let's explore each in detail:

OAuth 2.0 - Client authentication modes

Different APIs have varying expectations for how client credentials should be presented during OAuth token exchange. Until now, our OAuth authentication type assumed a single client authentication method, and users faced issues when credentials had to be sent in the authorization header. To address this, we've introduced a new Client Authentication option for custom connectors using OAuth 2.0. This allows you to specify how your client credentials (Client ID and Client secret) are transmitted to the authorization server during the token request process. You can choose from two options:
  • Include in the form data (Default): This method adds your credentials to the form data submitted within the body of the request.
  • Include in the authorization header: This method places your credentials in the request's security header using HTTP basic authentication.
Why this matters
  • Improved compatibility with APIs that enforce strict authentication rules
  • Smoother integrations with enterprise-grade APIs
  • Reduced authentication errors

Example
Assume you want to integrate Zoho Creator with Reddit, a popular social media platform. The Reddit API uses OAuth 2.0 and its documentation explicitly states that client credentials must be sent in the Authorization header using basic authentication.

Now, when configuring your OAuth 2.0 custom connector in Zoho Creator, you can simply select Include in authorization header under the Client Authentication field. This ensures your authentication flow will work as expected, without any custom code or middleware.

AWS Signature authentication

The industry-standard authentication required to securely interact with AWS services is now supported in Zoho Creator. The new AWS Signature 4 authentication type within Custom Connectors enables you to integrate with AWS services without relying on any middleware or authentication workarounds. This unlocks the ability to connect to a wide range of popular AWS services (such as S3, Lambda, DynamoDB, and more) and perform the required actions.

Why this matters
  • Enterprise-grade security for applications that deal with critical workloads or sensitive data
  • Seamless automation of workflows with your existing AWS infrastructure from within Zoho Creator
  • Complies with AWS's Signature Version 4 method, which ensures robust security and maximum compatibility while authenticating requests to AWS services
Example
Consider a setup where your organization generates critical business documents using a Zoho Creator application. You may need to store these documents in their AWS S3 bucket for recordkeeping and auditing purposes.

With the introduction of the new AWS Signature authentication in Custom Connectors, you can easily connect to S3 by providing your AWS credentials and region. Then you can use the invokeURL task to transfer documents from Zoho Creator to your S3 bucket.

This enables seamless and secure integration with AWS, bringing the full power of AWS's cloud capabilities into your Creator apps.

Bearer token authentication

Zoho Creator now supports Bearer token authentication. Many third-party services, like GitHub and Slack, use this authentication type, which is a lightweight method that enables secure API calls without the need for full OAuth. Now you can seamlessly integrate these services into your applications using custom connectors.

Why this matters
  • Eliminates the need for complex setups associated with other authentication types, like OAuth, making it ideal for APIs that use token-based access
  • Enables faster, hassle-free integrations with internal tools, developer platforms, and microservices
Example
Assume your sales team relies on Slack for internal communication. With Bearer token authentication now supported in Zoho Creator, you can establish a custom connector with Slack. Then you call Slack's API using invokeURL to automatically post updates to a channel whenever a new lead is generated.

In essence, this is a simpler, more secure path to connect Creator with modern APIs from GitHub and Notion to your own internal systems.

Help documentation

We've updated our help resources to reflect the recent enhancements to Custom Connectors. For detailed information, please refer to the Understand Connectors page.

Bonus: mTLS in Zoho Creator

While we're on the topic of custom connectors, let's wrap things up with a platform-level security upgrade. For the first time in the Zoho ecosystem, Zoho Creator now supports Mutual Transport Layer Security (mTLS) across all integrations. mTLS is available for both built-in and custom connectors. 

mTLS provides an added layer of security by enabling certificate-based, two-way authentication and ensures that both the client and server verify each other's identity. 

Why this matters
  • Particularly valuable for enterprises operating in zero-trust environments
  • Helps meet compliance requirements, such as HIPAA, ISO 27001, GDPR, and other industry standards
Availability
mTLS is currently available only on demand. Please reach out to our support team if your integrations require mTLS-based authentication.

These powerful enhancements reaffirm Zoho Creator's commitment to helping you build deeply integrated, enterprise-grade business applications—and we'll continue enhancing the platform to support your evolving needs. Stay tuned for more updates coming soon!

Till then,
The Zoho Creator Team

    • Sticky Posts

    • Zoho Creator - 2023 Release Projection 1

      Hello everyone! A very Happy New Year to you and your family. Hope you're all good and having a great time using Zoho Creator to make your lives easier and your businesses prosper. 2022 was an action-packed year for us at Creator, and we hope to continue

    • Zoho Creator User Group meetups in a city near you! - Oct - Nov, 2023

      Greetings from the Zoho Creator team! We're hosting a series of Zoho Creator meetups in various cities across the globe, and we'd love to meet you there! Our meetups are a great opportunity to network with industry peers, exchange ideas and best practices,

    • Zoho Creator - 2023 Release Projection 2

      Hello everyone! Time truly flies when you're having an incredible journey, and today we mark the completion of an eventful and action-packed six months. It feels like just yesterday when we embarked on this adventure together with the launch of our new

    • Upcoming Updates - August 2022

      Hi all, Greetings from the Zoho Creator team! Today we've got news for you on some exciting updates. And rest assured— there’s more to come! In this post, we'll be going over the upcoming features and improvements for this month as mentioned below. A

    • Introducing Zoho Creator's v2 APIs

      Hello App Creators, Welcome to Zoho Creator's v2 APIs! This post will serve as the central point for migrating implementations of Creator's current APIs (v1) to v2. Improvements that v2 brings OAuth-based authentication, which is more secure than the

    Nederlandse Hulpbronnen


      • Recent Topics

      • Customer Parent Account or Sub-Customer Account

        Some of clients as they have 50 to 300 branches, they required separate account statement with outlet name and number; which means we have to open new account for each branch individually. However, the main issue is that, when they make a payment, they

      • need a packing list feature

        In our business, goods listed on an invoice are packed in separate boxes and shipped off. for e.g. an invoice may have 10 items. each item could then be packed in different boxes depending on qty of each item. this packing list is as important as the invoice for purposes of shipping documents.  Request you to add this feature asap.

      • How do the keyword critera work?

        Hi, I'm working on automated assignment of tickets based on keywords. How does this feature work? Where does this criteria look for keywords - email address, subject, email body? Can you please clarify this as I want to avoid overlapping with criteria

      • Prevent stripping of custom CSS when creating an email template?

        Anyone have a workaround for this? Zoho really needs to hire new designers - templates are terrible. A custom template has been created, but every time we try to use it, it strips out all the CSS from the head.  IE, we'll define the styles right in the <head> (simple example below) and everything gets stripped (initially, it saves fine, but when you browse away and come back to the template, all the custom css is removed). <style type="text/css"> .footerContent a{display:block !important;} </style>

      • Workdrive 5.0 / API Documentation Workflows

        Hi Zoho, When will the API documentation of the workflows be published? We are interested in using it to trigger manual workflows from an external application. Greetings, Justin

      • Error: Unsupported content type: text/html;charset=UTF-8 after tryeing to get the token for n8n automation

        I am working on ZOHO Desk automation and need to get the ZOHO auth token for n8n I have created the app in ZOHO Desk API, got client id and client secret. Added all data required to get a token in n8n. After I sign in with my ZOHO credentials in ZOHO

      • How to keep track of bags, cans, drums of inventory?

        We buy and sell products that are packaged in bags 🛍️, cans🥫, drums🛢️, etc. with batch numbers. When we get a shipment of one of the products, how do we track we received (say) 10 cans each of 5L of a product and maybe we received 10 cans of another

      • Zoho Error: This Operation has been restricted. Please contact support-as@zohocorp.com for further details

        Hello There, l tried to verify my domain (florindagoreti.com.br) and its shows this error: This Operation has been restricted. Please contact support-as@zohocorp.com for further details. Screenshot Given Below -  please check what went wrong. Thanks

      • How many ZOHO-Sites does the ZOHO-One Suite allow for?

        The free version of ZOHO-Sites allows for two sites, but it seems that the professional version (which is included in the ZOHO-One Suite) only allows for two websites. Is that correct? How many sites can I have within one ZOHO-One account?

      • Replace Lookup fields ID value with their actual name and adding inormation from subforms

        Hi everyone,  I wanted to see if someone smarter than me has managed to find any solutions to two problems we have. I will explain both below.  To start we are syncing data from Zoho CRM to Zoho Analytics and I will use the Sales Order module when giving

      • Having Trouble Opening The Candidate Portal

        Recently am having trouble opening the Candidate Portal. It keeps loading but cannot display any widgets. Tried Safari, Chrome and Edge. Non of them work. Please solve the problem ASAP.

      • Webhook from Zobot to Zoho Flow fails

        I'm trying to connect from zobot to zoho flow. When testing in zflow, I am receiving all entered data from the connector correctly. The SalesIQ connector's "outputreaction" is {} (is this normal or is there a problem?). But as soon as I try my chat bot

      • Transition from Sole Proprietorship to GmbH (Limited Liability Company) – Best Approach in Zoho Books / Zoho One

        Hello everyone, I am currently operating under a Zoho One plan with a sole proprietorship in Switzerland. As of January 1st, 2026, I will be incorporating a new legal entity – a GmbH (Swiss equivalent of a Limited Liability Company). While the business

      • Presenting ABM for Zoho CRM: Expand and retain your customers with precision

        Picture this scenario: You're a growing SaaS company ready to launch a powerful business suite, and are looking to gain traction and momentum. But as a business with a tight budget, you know acquiring new customers is slow, expensive, and often delivers

      • Best way to display complex Bookings Consultation Descriptions on Zoho Site?

        I am a new user so apologies if this has been asked before. I couldn't find any answers in the forum. We offer 18 complex Consultations to our subscribers. Our current platform lets me put detail on these Consultations thoroughly (200-300 words) during

      • DKIM cannot be enabled for the domain as no verified default selector present

        Hi Support Team, For Domain DKIM record trying to enable status. but showing error "DKIM cannot be enabled for the domain as no verified default selector present" So, please resolve the issue. Thank you.

      • Issue Connecting My Domain to Zoho Sites Despite Purchasing It from Zoho

        Hello, I am facing an issue connecting my domain to my website on Zoho Sites. Details of the issue: I purchased the domain directly from Zoho. I am already using the same domain successfully with Zoho Mail. However, when I try to assign this domain to

      • Insert auto number from main form into subform rows

        Hello. I'm trying to take from my main form "order number" which i have setup as an auto generated number into every line created in my subform. So when a row is created in my subform i want the "order number " from the main form to be inserted automatically.

      • Dark Mode - Font Colors Don't Work

        When editing a document in Dark Mode and selecting font colors, they don't show up on screen.  Viewing/editing the same document in Light Mode shows them just fine.

      • Integrate Bunq with ZOHO Bookes

        We are new users of ZOHO Books, and our bank (BUNQ, in the Netherlands) isn't listed on the bank integrations. Is there a way to handle this?

      • Cliq iOS can't see shared screen

        Hello, I had this morning a video call with a colleague. She is using Cliq Desktop MacOS and wanted to share her screen with me. I'm on iPad. I noticed, while she shared her screen, I could only see her video, but not the shared screen... Does Cliq iOS is able to display shared screen, or is it somewhere else to be found ? Regards

      • Improving Collaboration Features in Zoho Portal

        Hello Zoho Community, I’ve recently started exploring Zoho services and I’m really impressed with the wide range of features. However, I feel there is still room for improvement in the collaboration area. For example, it would be really helpful if we

      • Access Denied

        I am iOS Developer and updating our clients project and shifted ZohoDeskPortalCore SDKs from cocoapods to SPM and changed few lines of code but now i am get access denied, the help center app is unavailable. please contact administrator.

      • Using Zoho Desk to support ISMS process

        Hi, I am evaluating using Zoho Desk for security incident management. This seems to be aligned with Zoho Desk purpose as its just another type of incident. However in security incident management, ideally I can link incidents (tickets) with a risk from

      • Bin Locations

        Dear all, I am wondering if someone has the ability to develop the bin locations option for zoho inventory (integrated with zoho books) Regards, Ryan

      • TaxJar vs Avalara

        Hi, I'm evaluating adoption of a sales-tax service for US based business. Anyone else have experience with TaxJar and Zoho Books? I am a Zoho One subscriber so anticipate needing to use Flow to make this work. It seems like Avalara are simply too expensive

      • How to check Leads with no Task (open activity)

        Hi everyone, I was wondering if there’s a way to view leads that don’t have any tasks assigned or open activities linked to them.

      • What can we do on our end to improve the Answer bot answers?

        Hi, I'm using the Answer bot card in the Codeless bot builder. I've input several questions and their answers in the FAQ section to feed the Answer bot. The text is all in French, as this is the language our customers communicate in. I've tried testing

      • Zoho Books Sandbox environment

        Hello. Is there a free sandbox environment for the developers using Zoho Books API? I am working on the Zoho Books add-on and currently not ready to buy a premium service - maybe later when my add-on will start to bring money. Right now I just need a

      • Taxes for EU B2B Transactions

        Currently, ZC doesn't seem to have a procedure for validating VAT numbers of businesses purchasing in another EU state, and removing local VAT is valid.  This is essential for all inter EU B2B trade.

      • How to upload file to Connect using API?

        Hi there. I looked at the API documentation and nowhere did it mention how to use the API method to upload a file even though it is mentioned that it is possible to be done so. Please help.

      • Items Landed Cost and Profit?

        Hello, we recently went live with Zoho Inventory, and I have a question about the Landed Cost feature. The FAQ reads: "Tracking the landed cost helps determine the overall cost incurred in procuring the product. This, in turn, helps you to decide the

      • How can I setup Zoho MCP with Chat GPT

        I can set up custom connections with Chat GPT but I cat an error when I try to set it up. The error is: "This MCP server can't be used by ChatGPT to search information because it doesn't implement our specification: search action not found" Thoughts?

      • Deluge - Can't get phone number SalesIQ

        Hey folks, I’m building a custom plug for SalesIQ that’s supposed to register leads into Zoho CRM. The SalesIQ chat is being implemented on WhatsApp, and in my plug I’m using this line: mobile_clean = session.get("phone").get("value"); From what I understand,

      • Group Tax in Service Line Items

        Hi FSM Team! I noticed that when you update a tax in the service line item the group tax is not showing up as an option. Let me know what can be done thank you!

      • Zoho Campaigns - Why do contacts have owners?

        When searching for contacts in Zoho Campaigns I am sometimes caught out when I don't select the filter option "Inactive users". So it appears that I have some contacts missing, until I realise that I need to select that option. Campaigns Support have

      • FSM Improvement Idea - Show an Import button when there is no data

        I am setting up FSM for a client and I noticed that there is no option to import data, see screenshot below. Even when you click Create Contact there is only an option to Import from Zoho Invoice. It is only after you add at lease 1 record that the Import

      • Zoho FSM API Delete Record

        Hi FSM Team, It would be great if you could delete a record via API. Thank you,

      • OAUTH_SCOPE_MISMATCH Error for Marketing Automation APIs with CRM Plus Account

        I'm trying to integrate Marketing Automation journey triggering via API but getting OAUTH_SCOPE_MISMATCH errors. I need clarification on API access for CRM Plus users.

      • Access token generate from the refresh token not working for API

        Dear Sir/Madam, When I use my refresh token to obtain new access_token, that token return INVALID_TOKEN when the same API is called. I made sure that my api site is correct and match the auth web site. However the original access_token work fine.

      • Next Page