SSO with Google as IdP

Using Security Assertion Markup Language (SAML), let your customers login to Zoho ERP Portal with GSuite credential.

  • Sign in to your Google Admin console.

  • From the Admin console dashboard, click Apps. 

  • To see Apps on the dashboard, you might have to click More controls at the bottom.

  • In the options shown click the SAML Apps button.

  • Click the + icon in the bottom corner of the screen.

  • Click Setup my own custom SAML App in the bottom of the pop-up window which opens.

  • You can copy the Single Sign On URL and download the X.509 Certificate.

  • Paste the Single Sign On URL in the Login URL and Password Reset URL.

  • Paste https://accounts.google.com/logout in the Logout URL field.

  • Paste the X.509 Certificate in the Public Key field.

    • To do this, download the certificate from X.509 Certificate open it using any text editor from your local device. This will contain the public key with the begin and end certificate. You can copy and paste it in Zoho ERP.

Warning: If you do not include the begin and end certificate, the SSO setup will be invalid.

  • In the Basic Application Information window, add an Application name and description.

  • (Optional) Click Choose file next to the Upload Logo field to upload a PNG or GIF file to serve as an icon. The file size should be 256 pixels square.

  • In the Service Provider Details window, add ACS URL and Entity ID.

    • The ACS URL from Zoho ERP is required to configure the SAML settings in Google. For this, go to Settings > Customer Portal > General > Portal Login > SSO(Single Sign On) and click Configure.

    • The Entity ID will be a constant - zoho.com.

  • Click Finish.

Google will be configured as an IdP for your Zoho ERP organization. Now, when customers log in to the customer portal, they can use their Google credentials.