Single Sign-On in Zoho using WordPress IdP. Login into Zoho using WordPress, by configuring Zoho as SP and WordPress as SAML IDP. Here we will go through a step-by-step guide to configure SSO between Zoho as Service Provider(SP) and WordPress as an Identity Provider(IDP).

Note: Premium Version of Zoho is required to set up SSO.

Configure SSO for Zoho by following the instructions below:

Pre-requisites: Download And Installation

To integrate the WordPress site as an Identity Provider, you will need to install the miniOrange Login using WordPress Users ( WP as SAML IDP ) plugin:

Login using WordPress Users ( WP as SAML IDP )

By miniOrange

(42)

Single Sign-On (SSO) login with WordPress Users into any Service Provider like Tableau, Zoho, Zoom, Moodle, Canvas LMS, Absorb LMS, TalentLMS, etc.

 Tested with 6.3.1

Get this plugin

• Login to your Zoho account and access Zoho Mail.
• Click on Control Panel and select Mail and Docs.

• Go to Domains, click on Add Domain and add your domain.

• In the list, click the icon under the Verified column for your domain to validate it.

• Follow the steps specified on the page that opens up and after that click on Verify to validate your domain.

1. Configure Zoho as SP (Service Provider)

• Open the WordPress site.
• Install and activate the Login using WordPress Users ( WP as SAML IDP ) plugin on your WordPress site which is acting as an Identity Provider.
• Go to the Wordpress IDP plugin, navigate to the IDP Metadata tab. Here, you can find the Identity Provider metadata such as Certificate , Login URL and Logout URL which are used to configure the Service Provider(Zoho).

 Instructions:

• Open a new browser tab or window, Login to Zoho Accounts at https://accounts.zoho.com/ as a user with administrative rights.
• Navigate to Organization.
• Select SAML Authentication and click on Setup Now.


Switch back to the tab / window with the IDP Metadata. Enter the information into the corresponding fields.

Sign-in URL	Copy and paste the SAML Login URL.
Sign out URL	Copy and paste the SAML Logout URL.
Algorithm	RSA
X.509 Certificate	Download the certificate. Upload it here.

• Click on Configure to save the SAML Single Sign On (SSO) settings.
• Under the Identity Provider Settings enter the values as suggested below.

• Click on Download to download the metadata file. You can use this metadata file to configure the plugin.


You have successfully configured Zoho as Service Provider.

2. Configure WordPress (WP) as IdP (Identity Provider)

• You would be needing following credentials from Zoho.

Entity Id	e.g. "https://accounts.zoho.com/samlresponse/your_domain.com".
ACS URL	e.g. "https://accounts.zoho.com/samlresponse/your_domain.com".

• You can find all the information in the Metadata file, downloaded in the previous step.
Note : Please ensure you replace "your_domain.com" with your Domain name.

 Instructions:

• Open the WordPress site.
• Go to the WordPress IDP plugin, navigate to the Service Provider tab.
• Enter the values corresponding to the information from Zoho. Refer to the table below.

  Service Provider Name	Name of your Service Provider.
  SP Entity ID or Issuer	Copy and paste the SP-EntityID from the metadata XML.
  ACS URL	Copy and paste the ACS URL from the metadata XML.
  NameID Format	urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
  Assertion Signed	Checked

  
• Click on the Save button to save your configurations.

3. Testing SSO

• Launch your custom URL e.g.(mail.yourdomain.com).
• This will be redirected to the WordPress login page, provided in the configuration.
• The authentication will be validated by the identitiy provider.

If you were able to log into Zoho, then your configuration is correct.

Zoho Single Sign-On(SSO) solution provides SAML 2.0 Authentication with full control over access to the applications with one set of Login credentials.In this guide, We have successfully configured Zoho SAML Single Sign-On (SSO) using plugin - Login with WordPress users ( WP as SAML IDP ). By configuring WordPress(WP) as IdP and Zoho as SP. This solution ensures that you are ready to roll out secure Single Sign-On (SSO) access with SAML 2.0 Authentication into Zoho using WordPress (WP) login credentials.

Additional Resources

• What is Single Sign-On (SSO)?
• What is SAML?
• What is Zoho?
• Login into WordPress
• Additional SAML IDP guides
• Frequently Asked Questions (FAQs)