Single Sign-On (SSO) for Portal

SSO is an authentication service that allows a user to use single login to access multiple applications. SSO uses Security Assertion Markup language (SAML) for exchanging authentication between the applications.

This feature is available only in the Standard and Professional plans of Zoho Subscriptions.

SAML

Security Assertion Markup Language (SAML) is an open-standard for exchanging authentication and authorization data between two parties ie., Service Provider (SP) and Indentity Provider (IdP). 

Service Provider agrees to trust the Identity Provider for authenticating the user. Identity Provider generates authenticating assertion for the user and communicate that with Service Provider. 

The most important use case that SAML addresses is web browsers single sign-on (SSO). Single sign-on can be established between different domains.

How SSO works?

SSO involves three parties

• User
• Service Provider (Ex: Zoho)
• Identity Provider (Ex: OneLogin, Google etc.,)

Let’s look at the SSO workflow,

1. User requests a service from the Service Provider. 
2. Service Provider requests authentication assertion from the Identity Provider.
3. Based on the assertion, Service Provider makes decision to the user’s request.

To whom does this fit?

Merchants who maintain user accounts on his end and still require Zoho Subscriptions’ customer portal for billing. 

For Example:

Let us consider, a merchant has an online book store (say, www.zylker.com). He maintains user accounts on his end. The user has to login to www.zylker.com to make a purchase. To ease the work, the merchant decides to use Zoho Subscriptions’ customer portal for billing and payments. I.e., to make payment, update credit card and verify past transactions.

• www.zylker.com is to maintain his account and checkout
• www.subscriptions.zoho.com/portal/zylker is for billing and payments.

But wait, should the user login to both the accounts?

That’s right. User needs to login both the servers. (Annoying, huh?)

Thus, the merchant's requirement is, 

1. Customer will be using both the accounts. 
2. Customer who logs in to www.zylker.com, will be automatically logged in to
www.subscriptions.zoho.com/portal/zylker (Zoho Subscriptions' Portal)

Well, enabling SSO between two systems can do that. 

How to enable SSO for my Zoho Subscriptions portal ?

I. Decide your IdP : Identity Provider is the one who authenticates and authorizes user to perform an action. It can be,

• Third party vendor (Ex: Google, OneLogin)
• Your own application

II. Just write to support@zohosubscriptions.com with the following information

1. Login URL
2. Logout URL
3. Password reset URL
4. X.509 certificate
5. Encryption algorithm (Ex: RSA, SHA1)

and sit back, we will enable SSO for your account.

Was this document helpful?

Yes

No

Let us know where we can improve

Oops! We didn't catch your name.

*

Umm.. Please enter a valid Email Id.

*

We can wait. Take your time to draft us your feedback.

*

By clicking Submit, you agree to our Privacy Policy.

Submit Cancel

Thank you for your feedback!

Submit