Zoho IdP SSO setup instructions

NAVIGATION  Header > Admin Settings > Single Sign-On

PERMISSIONS  Admin role in KaseyaOne and an Administrator account in Zoho

1. Open a browser and log in to KaseyaOne.

2. In a separate browser tab, log in to the Zoho Admin Portal as an administrator.

3. In Zoho, add your KaseyaOne Company Identifier by creating a custom field:

• Go to the User Management > Manage Fields tab and click + Add a Custom Field.

• In the Add Custom Field dialog, enter the following information, and then save to add the custom field:

• Field Name: enter Companyid

• Field Type: select Single Line from the dropdown list

• Default Value: enter your KaseyaOne Company Identifier

  NOTE  To obtain this identifier: in KaseyaOne, navigate to Admin Settings > Single Sign-On. In the Single Sign-On with Identity Providers tile, click Add Configuration. In the Configure SSO dialog that opens, copy the Company Identifier field value, then return to Zoho to enter it.
  

• Character Limit: enter 255

• Mark as mandatory field: turn on this toggle. Leave the other toggles turned off.

4. Go to App Management > Applications and click + Add Application.

5. On the Choose Application page, click Create Custom App.

6. Click New application on the next page, then click Create your own application.

7. On the Add Custom App page, enter a Display name (e.g., KaseyaOne), then select an SSO Mode by clicking the arrow and entering the following required settings on the page that opens.

Enter these values in the section at the top of the page (and leave the other fields in this section empty):

• Sign-in Type: select SAML from the dropdown list

• Issuer: enter https://one.kaseya.com

NOTE  If multi-tenancy is enabled in your Zoho environment, enter your KaseyaOne Entity ID in the Issuer field instead. To obtain this ID: in KaseyaOne, navigate to Admin Settings > Single Sign-On. In the Single Sign-On with Identity Providers tile, click Add Configuration. In the Configure SSO dialog that opens, copy the Entity ID field value, then return to Zoho to enter it.

• Assertion Consumer Service URL: enter https://api-one.kaseya.com/api/v1/sso/saml-callback
  

Use the default values in the Credentials Details section.

Select these values in the Configuration Settings section:

• SAML signing scope: select Response Only from the dropdown list

• Assertion encryption: select None from the dropdown list
  

Add these SAML attributes to the Attribute Mapping section:

Attribute Name	Format	Attribute Value
companyIdentifier	Basic	Companyid
email	Basic	Primary email address
firstName	Basic	First name
lastName	Basic	Last name
userName	Basic	Primary email address
securityGroups	Basic	Department

NOTE  The KaseyaOne companyIdentifier value comes from the custom field you created above. The userName value uses the primary email address, the same source as email. The securityGroups value comes from the user’s Zoho Department, which you will create in Step 3. Assign users to the KaseyaOne application in Zoho.

Click Done at the bottom of the page to save your SAML settings and return to the main Add Custom App page.

8. Click Create to add the KaseyaOne application.
   

9. On the Applications page, click your KaseyaOne app. On the Single Sign-On tab:

• Copy and save the Issuer value. You will need this value to add the Zoho SSO certificate to KaseyaOne.
  

• Scroll down to the bottom of the page. Ensure that Response Only is selected for SAML signing scope. Then download the certificate by clicking Download Certificate.
  

1. In KaseyaOne, navigate to Admin Settings > Single Sign-On. In the Single Sign-On with Identity Providers tile, click Add Configuration.

2. In the Configure SSO dialog that opens, enter the Zoho Issuer value you saved above into both of these fields: Identity Provider Single Sign-On URL and Identity Provider Issuer.
   

3. Click Upload. Browse to and upload the Zoho certificate. Click Save to save changes and close the Configure SSO dialog.
   

4. On the Single Sign-On page, turn on the Enable Single Sign-On via SAML toggle to enable SSO integration.
   

1. In Zoho, go to User Management > Groups and click + Add Group.

2. On the Add Group page, add a new security group:

• In the Group Info step, enter the group name and set the group type to Department. Click Continue.

NOTE  Zoho sends the group name value to KaseyaOne in the securityGroups attribute.

• In the Members step, assign an administrator as the Department Head, and add users to the group using the Moderators, Members, or Followers fields. Click Create Group.

• The group is created and a confirmation message displays in the Summary step. Click Done to return to the Groups page.

3. Go to App Management > Application, and assign users to the KaseyaOne application.

NOTE  Each user you assign must have the same email address in Zoho and KaseyaOne.

After you finish the configuration, test both login flows. Ensure that you have logged out of Zoho and KaseyaOne before running these procedures.