Binding: Choose http-post or http-redirect.Certificate: * Note: Remove the Begin Certificate and End Certificate'.See the attached example from your idP xml metadata. (Optional) Accepted attributes are email (urn:oid.19200300.Any unique identifier linked to nameID such as edupersonTargetedID, persistentID, or mail.You will need to wait for this to be approved before you can configure the SSO on the Zoom side.įirst, configure your IdP to send us the following Note: If you don't already have an approved vanity URL, apply for your vanity URL (such as ) on your Account Profile page. Provisioning will take place without email confirmation for any users falling under an approved domain. Note: Without an approved Associated Domain, users will need to confirm to being provisioned on the account through an email automatically sent to them. Business, Enterprise, or Education account.How to enable or disable automatic SSO certificate rotation.If the user does not exist, Zoom creates a user account automatically with the received name ID.

Once Zoom receives a SAML response from the Identity Provider (IdP), Zoom checks if this user exists. You do not need to register as a user in Zoom. Zoom acts as the Service Provider (SP), and offers automatic user provisioning. Zoom can map attributes to provision a user to a different group with feature controls. Zoom works with Okta as well as other enterprise identity management platforms such as Centrify, Microsoft Active Directory, Gluu, OneLogin, PingOne, Shibboleth, and many others. Zoom single sign-on (SSO) is based on SAML 2.0. Single sign-on allows you to log in using your company credentials.

What is zoom single sign on