Zoho One - SSO configuration

This documentation has been tested and approved by Kelvin Zero's team

This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Zoho One using MPAS. SSO simplifies user authentication by allowing access to multiple applications with a single set of credentials. This integration enhances security and improves user experience across your organization.

In order to complete this integration please make sure you have the following : 

- Zoho One Account: Admin rights

- MPAS: Admin rights and SSO metadata

- Domain Verification: Your domain must be verified in Zoho One prior to the SSO configuration.

Important: Custom elements in URLs (like realm names) are case sensitive. Make sure to match the exact casing from your environment.

Configuring Zoho One

1. On your Zoho One dashboard, click on the "Setup" icon located top right of your screen 
2. In the left menu, select "Security" and then "Custom Authentication"
   

1. Click on "Add IdP"
   

1. Complete the fields and click on "Save"
   
2. Open Multi-Pass Dashboard
   
3. Select your deployment, and click on "Admin Console"
   
4. In the Admin Console, select "Clients" and fill the required fields, click on "Next" then Click on "Save"
   

​

​

1. Complete the fields in the different sections
   

1. Home URL = https://ca.auth.kzero.com/realms/<REALM NAME>/protocol/saml/clients/zoho
   
2. Valid redirect URIs = https://desk.zoho.com/ - https://accounts.zoho.com/signin/sam[...]
3. IDP-Initiated SSO URL name = zoho
   
4. Name ID format = email 
   
5. Sign assertions = ON
   

1. Click on "Realm Setting" and then on "Keys"
   

1. Select certificate and Copy the text, paste it in a note to get a .txt file.
   
2. Go back to Zoho One and complete the different fields
   
1. Signin-url: https://ca.auth.kzero.com/realms/<REAL NAME>/protocol/saml
2. signout-url: https://ca.auth.kzero.com/realms/<REALM NAME>/protocol/openid-connect/logout?redirect_uri=https%3A%2F%2Fdesk.zoho.com%2Fportal%2Fdeccanpl%2F
3. Change-password: https://ca.auth.kzero.com/realms/<REALM NAME>/protocol/saml

Once Zoho One is integrated with MPAS, make sure you assign the SSO setting to the required Groups and/or Users in your Zoho Admin Console

• Related Articles

• Kaseya One - SSO configuration

  Please note that this application has not been formally tested by Kelvin Zero Inc. It is provided solely as a reference guide. If you encounter any issues, kindly submit a ticket directly through the support desk. This documentation provides a ...

• SAML SSO Integration Guide

  This guide provides an overview of how to configure SAML Single Sign-On (SSO) between Multi-Pass and a third-party Service Provider (SP). Multi-Pass acts as the Identity Provider (IdP) in this federation model. Multi-Pass is working on SCIM support ...

• Zoho Desk - CIAM Passwordless configuration

  This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up MPAS as the CIAM passwordless authentication method for your customers. This integration enhances security and ...

• Notion - SSO configuration

  Please note that this application has not been formally tested by Kelvin Zero Inc. It is provided solely as a reference guide. If you encounter any issues, kindly submit a ticket directly through the support desk. This documentation provides a ...

• Addigy - SSO configuration

  This documentation has been tested and approved by Kelvin Zero's team This documentation provides a step-by-step guide to setting up Single Sign-On (SSO) for Addigy using MPAS. SSO simplifies user authentication by allowing access to multiple ...