Add Zoho Directory SSO (#780)

This commit is contained in:
Bethuel Mmbaga
2026-06-08 18:12:40 +03:00
committed by GitHub
parent c2ccdf43e0
commit a8c86c48e0
6 changed files with 82 additions and 0 deletions

Binary file not shown.

After

Width:  |  Height:  |  Size: 335 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 520 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 244 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 197 KiB

View File

@@ -93,3 +93,9 @@ to integrate with NetBird. Below are the steps to set up different OIDC-complian
[AWS Cognito](https://aws.amazon.com/cognito/) is a fully managed customer identity and access management (CIAM) service from Amazon Web Services. It provides authentication, authorization, and user management for web and mobile applications, with native support for OpenID Connect, OAuth 2.0, and SAML 2.0.
<Button href="/manage/team/single-sign-on/aws-cognito" variant="outline">Setup AWS Cognito</Button>
### Zoho
[Zoho Directory](https://www.zoho.com/directory/) is a cloud-based identity and access management platform that provides single sign-on, multi-factor authentication, and user lifecycle management. It supports OpenID Connect, OAuth 2.0, and SAML, and lets you register NetBird as a custom OIDC application.
<Button href="/manage/team/single-sign-on/zoho" variant="outline">Setup Zoho</Button>

View File

@@ -0,0 +1,76 @@
import {Note} from "@/components/mdx";
# Zoho on NetBird Cloud
You can use Zoho as your Identity Provider with NetBird, but it will require some additional configuration steps. Zoho Directory is a cloud-based identity and access management platform that provides single sign-on, multi-factor authentication, and user lifecycle management, with support for OpenID Connect, OAuth 2.0, and SAML.
NetBird integrates with Zoho as a custom OIDC application.
<Note>
Support for OIDC-compliant IdPs is available on the Team plan and higher.
The Free plan supports Google, Microsoft, and social logins.
</Note>
## Step 1: Create a Custom OIDC Application
Log in to [Zoho Directory](https://directory.zoho.com/) and open the **Admin Panel** from the left sidebar. Navigate to **Applications**, click **Add Application**, and then choose **Create Custom App**.
Enter `NetBird` as the application name and an optional description.
<p>
<img src="/docs-static/img/manage/team/single-sign-on/zoho-idp/create-custom-app.png" alt="zoho-create-custom-app" className="imagewrapper-big"/>
</p>
## Step 2: Configure the OIDC Application
Click **Select SSO mode** and choose **OIDC** as the Sign-In Type. On the same form, set the following:
- **Application Type**: `Regular Web Application`
Under **Relying Party Details**, enter the NetBird endpoints:
- **Sign-in URL**: `https://app.netbird.io`
- **Sign-out URL**: `https://app.netbird.io`
- **Redirect URL**: `https://login.netbird.io/login/callback`
<p>
<img src="/docs-static/img/manage/team/single-sign-on/zoho-idp/configure-oidc-app.png" alt="zoho-configure-oidc-app" className="imagewrapper-big"/>
</p>
Click **Done**, then **Create**.
## Step 3: Retrieve the Client Credentials
Open the newly created application and select the **Single Sign-on** tab. Copy and store the following securely:
- **Client ID**
- **Client Secret**
Under **Optional Endpoints**, copy the **Discovery Endpoint** as well. NetBird uses this single URL to automatically discover the Authorization, Token, and User Info endpoints for your Zoho data center.
<p>
<img src="/docs-static/img/manage/team/single-sign-on/zoho-idp/client-credentials.png" alt="zoho-client-credentials" className="imagewrapper-big"/>
</p>
## Step 4: Assign Users
Assign access to the NetBird application so users can sign in to NetBird with Zoho. You can assign individual users with **Add User**, or assign entire groups with **Add Group**.
<p>
<img src="/docs-static/img/manage/team/single-sign-on/zoho-idp/assign-users.png" alt="zoho-assign-users" className="imagewrapper-big"/>
</p>
## Step 5: Share Configuration with NetBird
Send the following information to the NetBird support team at support@netbird.io:
- **Client ID**
- **Client Secret**
- **Discovery Endpoint** (the OpenID configuration URL you copied in Step 3)
- **Email domains for your users**
<Note>
We recommend using a secure channel to share the Client Secret. You can send a separate email and use a secret sharing service like: <br/>
- https://onetimesecret.com/en/ <br/>
- https://password.link/en <br/>
</Note>