Zoho Sites Help
Zoho Sites Help

Setting up SAML for your Member Portal in Zoho Sites

Linking your SAML account to your website not only enables you to manage your visitors' login credentials—it also enables members of your website to access your Member Portal without being prompted to enter individual login credentials.

How SAML Works

SAML single sign-on authentication involves a service provider and an identity provider. In this scenario, the service provider your Member Portal— created via Zoho Sites. When you've enabled SAML, the end-user management and authentication are handled through your company's identity provider (IDP). An end user who requests access to your website via your member portal will be redirected to your identity provider for authentication.

The identity provider authenticates the end user and in return, generates an authentication assertion. This indicates that a user has been authenticated. On receiving the assertion, the end user is redirected back to your website and signed in seamlessly.

Being a single point of authentication that happens with your trusted identity provider, SAML ensures that your end-user credentials are secure within your company's firewall boundary.

Setting up SAML SSO

The third-party identity provider provides the configuration details for the SAML. Note that only the Site Owner and contributors with the Admin or Developer credentials can set up SAML single sign-on for the Member Portal for your Zoho Sites website.

  1. Click Settings at the top of your builder.
  2. Click Member Portal below the General section.
  3. Click the Enable Member Portal switch if you haven't enabled your portal yet.
  4. Click the SAML radio button for your sign on method.
  5. Enter the required credentials from the identity provider of your choice.
  6. Click Save.

Disabling SAML SSO

You may disable your SAML SSO at any time, or switch to a different identity provider (IdP), at any time, here's how:

To disable SAML SSO:
  1. Access your Member Portal settings.
  2. Click the Default Portal radio switch.

This will disable SAML and users can sign in to your website through the default sign-in and sign-up pages.

To switch to a different identity provider:
  1. Click the SAML radio button for your sign on method.
  2. Simply enter the credentials from the identity provider of your choice.
  3. Click Save.

Configuring Identity Providers

Okta
  1. Log in to your Okta account.
  2. Click the Applications tab and select Applications.
  3. Click Add Application.
  4. Click Create New App.
  5. Select Web from the Platform drop-down list.
  6. Click the SAML 2.0 radio button.
  7. Click Create.
  8. Provide a name for the application. (You can also upload a logo if you prefer one.)
  9. Click Next.
  10. Copy ACS URL and save in single sign on URL and Audience URL.
  11. Enter the Name ID format: EmailAddress
  12. Select the I’m an Okta customer adding an internal app in the Feedback page.
  13. Select the This is an internal app that we have created option.
  14. Click Finish.
  15. The Sign On section of your newly created application appears.
  16. Click View Setup Instructions on the Sign On tab. (It opens a new window to the IdP settings.)
  17. Click single sign on url. On the IdP Settings window, do the following:
>Single sign on url
> login url in member portal
> Identity Provider Issuer for logout.
  1. Now you must select the users to whom you wish to give access to the SAML-enabled Help Center. To do this:
  • Click the Applications tab and select your newly created application on Okta.

  • Click on the Assignments section of the application.

  • Click Assign and then select Assign to People.

  • In the pop-up window, type your username into the search box and then click Assign next to your username.
    Repeat this step to add more users.

  1. Now you must select the users to whom you wish to give access to the SAML-enabled Help Center. To do this:

Enter https://YOUR_OKTA_DOMAIN/login/signout?fromURI=YOUR_DOMAIN as the log out URL.

YOUR_DOMAIN : the domain of your website

Access your Okta administrator account, then security> API> Trusted Origins: Add your domain

Onelogin

  1. Log in to your Onelogin account.
  2. Click the Applications tab and select Applications.
  3. Click Add App.
  4. Search for SAML Test Connector and select the first result. Make sure that it is (IdP).
  5. Provide a name for the application.
  6. Click Save.
  7. Click the SSO tab from the menu on the left.
  8. Click View Details below Standard Strength Certificate.
  9. Click Download.
  10. Copy the Issuer URL and the SAML 2.0 URL.
  11. Access your Zoho Sites website builder and click Settings.
  12. Click Member Portal below the General section.
  13. Paste the SAML 2.0 Endpoint (HTTP) in the Login Url text box in your Member Portal.
  14. Paste the SLO Endpoint (HTTP) in the Member Portal
  15. Upload the onelogin.pem file from your computer.
  16. Click Save.
  17. Copy the ACS URL and access Onelogin.
  18. Select Configuration from the menu on the left.
  19. Paste the ACS URL in Recipient, ACS (Consumer) URL Validator, ACS (Consumer) URL and Save.

Auth0

  1. Log in to your Auth0 account.
  2. Click Applications.
  3. Click +Create Application
  4. Enter a name for your application
  5. Select an application type. (Regular Web Application)
  6. Click Save.
  7. Select application from the menu on the left.
  8. Select the application you had just created.
  9. Scroll down and select Advanced Settings.
  10. Click the Certificate tab.
  11. Click Download Certificate.
  12. Select PEM from the drop-down list as the download format.
  13. Scroll to the top of the page an click the Addons tab.
  14. Click the SAML 2 WEBAPP option.
  15. Click the Usage Tab.
  16. Download the Auth0 Certificate.
  17. Copy the Identity Provider Login URL.
  18. Access your Zoho Sites website builder and click Settings.
  19. Click Member Portal below the General section.
  20. Paste the Login and Logout URL's
  21. Upload the Auth0 Certificate from your computer.
  22. Click Save.
  23. Copy the ACS URL and access Auth0.
  24. Click the Settings tab.
  25. Paste the ACS URL which you copied from your Zoho Sites builder.
  26. Scroll to the bottom of the page and click Save.

For users to redirect to the website url after logging out:

YOUR_DOMAIN : the domain of your website

CLIENT_ID : the client_id from auth0