SSO With OneLogin as IdP
You can configure Single Sign-On (SSO) in Zoho Billing using OneLogin as your Identity Provider (IdP) by creating a SAML 2.0 application. Once configured, customers can sign in via OneLogin and access the portal with a single set of credentials.
Create SAML App in OneLogin
Using Security Assertion Markup Language (SAML), your customers can sign in to your organisation’s customer portal when they sign in to their OneLogin account. For this you must create a SAML application in OneLogin. Here’s how you can do this:
- Log in to your OneLogin account.
- Click on the menu icon in the top left corner of the page.
- Navigate to Applications and click Applications from the dropdown.
- On the Applications page, click Add App.
- Search for SAML Custom Connector (Advanced) in the search box.
- Provide a Display Name for the application. For example, Zoho Billing Portal SSO.
- Click Save.
A SAML application will be created in OneLogin. You can then configure the app and create a connection with your Zoho Billing portal.
Configure Portal SSO in Zoho Billing
Once you have created a SAML app in OneLogin, you can start setting up SSO using the details obtained from OneLogin, such as the SAML 2.0 Endpoint (HTTP), SLO Endpoint(HTTP) , and X.509 Certificate, in Zoho Billing’s Portal SSO. This sets up the path for your customers to access the Zoho Billing Portal securely using their OneLogin credentials.
To configure the Portal SSO in Zoho Billing:
Log in to your Zoho Billing organization.
Go to Settings in the top right corner of the page.
Click General under Customer Portal.
Click Configure to set up the single sign on for your organisation’s customer portal.
Now, go to your application in OneLogin.
Switch to the SSO tab.
- Copy the SAML 2.0 Endpoint (HTTP) and paste it in the Login URLfield in Zoho Billing.
- Copy the SLO Endpoint (HTTP) and paste it in the Logout URL field in Zoho Billing.
- Copy the SAML 2.0 Endpoint (HTTP) and paste it in the Reset Password URL field in Zoho Billing.
Click View Details under the X.509 Certificate.
- Copy X.509 Certificate and paste it into the Public Key field in Zoho Billing with the begin and end certificate.
- Or, download the X.509 PEM certificate under X.509 Certificate and open it using any text editor from your local device. Copy the certificate with the begin and end certificate.
Warning: If you do not include the begin and end certificate, the SSO setup will be invalid.Click Configure.
After you have configured the Portal SSO in Zoho Billing, the ACS URL and RelayState URL will be generated.
Configure the SAML App in OneLogin
Using the ACS URL and RelayState URL, you must configure your SAML application in OneLogin.. Here’s how:
- Go to the Configuration page of your application and configure the following fields:
- Paste the Relay State URL from Zoho Billing in the RelayState field.
- Paste the ACS URL in the Recipient field.
- Paste the ACS URL in the ACS (Consumer) URL Validator and ACS (Consumer) URL fields.
- Set the SAML nameID format as email.
- The other fields can be configured with the default selection, as they are already set to values that are compatible with Zoho Billing.
- Click Save.
Once the setup is complete, your customers can seamlessly access the Zoho Billing Customer Portal through OneLogin using a single set of credentials.