Pre-requisite: Download And Installation

• Login to your Zoho account and access Zoho Mail.
• Click on Control Panel and select Mail and Docs.

• Go to Domains, click on Add Domain and add your domain.

• In the list, click the icon under the Verified column for your domain to validate it.

• Follow the steps specified on the page that opens up and after that click on Verify to validate your domain.

Step 1: Configure Zoho as the Service Provider (SP)

• Go to the Drupal site, Install and activate the Drupal SAML IDP ( Drupal as SAML IDP ) module on your Drupal site which is acting as an Identity Provider.
• Go to the Drupal SAML IDP module, navigate to the IDP Metadata tab. Here, you can find the Identity Provider metadata such as Certificate , Login URL and Logout URL which are used to configure the
  Service Provider(Zoho).



 Instructions:

• Open a new browser tab or window, Login into Zoho Accounts at https://accounts.zoho.com/ as a user with
  administrative rights.
• Navigate to Organization and select SAML Authentication and click on Setup Now.


Switch back to the tab / window with the IDP Metadata. Enter the information into the corresponding fields.


Sign-in URL	Copy and paste the SAML Login URL.
Sign out URL	Copy and paste the SAML Logout URL.
Algorithm	RSA
X.509 Certificate	Download the certificate. Upload it here.

• Click on Configure to save the SAML Single Sign On (SSO) settings.




• Click on Download to download the metadata file. You can use this metadata file to configure the module.

Step 2: Configuring Drupal as Identity Provider (IDP)

 By Uploading SP Metadata :

• Click on Upload SP Metadata.

• Upload metadata file and click on Upload.


 Manually configuring Drupal As IdP :

• You would be needing following credentials from Zoho.
• Entity ID : e.g. "https://accounts.zoho.com/samlresponse/<your_domain.com>".
  
• ACS URL : e.g. "https://accounts.zoho.com/samlresponse/<your_domain.com>".
  
• Go to Drupal IDP Module Dashboard and click on Service Provider Setup tab.
• Enter the following information into the corresponding fields and click on Save button.



Service Provider Name	Enter a name of your choice. e.g. zoho.
SP Entity ID or Issuer	You can find the EntityID in Your SP-Metadata XML file enclosed in EntityDescriptor tag having attribute as entityID.
ACS URL	You can find the ACS URL in Your SP-Metadata XML file enclosed in AssertionConsumerService tag having attribute as Location.

Step 3: Testing SSO

• Launch your custom URL e.g.(mail.yourdomain.com).
• This will be redirected to the Drupal login page, provided in the configuration.
• The authentication will be validated by the identitiy provider.

If you were able to log into Zoho, then your configuration is correct.