Zoho (SAML)

Overview

TraitWare can be used to provide passwordless MFA to Zoho Directory users.

Prerequisites

The Zoho account must have an active Zoho Directory.

Set Up TraitWare Passwordless MFA for Zoho Login

Navigate to Zoho Directory > Security.

Select the Custom Authentication tab.

Click Add IdP.

Create a Display Name for the TraitWare login (TraitWare SSO).

Choose Groups that will use TraitWare as the login.

Copy the ACS URL. This will be used later to create the Zoho application in TraitWare.

In the TraitWare admin console navigate to Applications and click SAML.

Select Use a Template.

Search for the application template.

Name the application.

Paste the ACS URL copied from the Zoho admin console. Click Save Changes.

Click the Provider Credentials tab. Copy the SAML Login Endpoint.

Paste the SAML Login Endpoint in the Sign-in URL.

Download the PEM file from the Provider Credentials page.

Upload the PEM into the Verification Certificate section. Click Save. 

Acknowledge that users in the selected groups will sign in using TraitWare.

NOTE: it is recommended to test the login on a test user in a test group before enabling for all users. This should not be an admin user to prevent accidental lockout during testing.

Test the Login

Navigate to the Zoho login page and enter email address.

Click the SAML - TraitWare SSO button.

Use the TraitWare mobile app to scan the QR and sign in.