Configuring Zoom with Azure

You can connect Zoom with Azure to use your company's Azure credentials to log in to your Zoom account via Single Sign-On (SSO). You can assign users Zoom licenses based on their group in Azure.

Note: As of September 8, 2023, customers are longer be able to create new JWT apps. Authentication for tokens created using the JWT app type will stop functioning on this day, so to prevent disruption we recommended migrating to OAuth authentication as soon as possible.

This article covers:

Prerequisites for configuring Zoom with Azure

Note: Without an approved associated domain, users will need to confirm to be provisioned on the account through an email automatically sent to them. Provisioning will take place without email confirmation for any users falling under an approved domain.

How to add Zoom from the Azure Gallery

Note: Screenshots in this article were taken using the default Azure theme. Your Azure portal will look slightly different if you changed the theme.

  1. Sign in to the Azure portal.
  2. Click the Azure Active Directory icon.
    Note: It is not showing, you may find it under More Services.
  3. Click Enterprise Applications.
  4. Click All Applications.
  5. At the top of the window, click New Application.
  6. In the Add from Gallery window, search for Zoom.
  7. In the Telecommunications category, click Zoom.
  8. On the right side, click the Add button.

How to configure Single Sign-On with Azure

  1. Sign in to the Azure portal.
  2. Click Azure Active Directory.
  3. Click on Enterprise applications, then New Application.
  4. Search for the Zoom application and click on the Zoom tile.
  5. (Optional) On the left of the page under Name, you can rename the application as you wish.
    Note: We highly recommend renaming the app to avoid confusion with other Zoom applications.
  6. Click Create.
    The overview page will appear once complete.
  7. Click Set up single sign-on.
  8. Under Select a single sign-on method, select SAML.
  9. Click the edit icon for Basic SAML Configuration.
  10. Fill out the following fields:
  11. Click Save.
  12. To view the claims being passed by Azure, click the pencil icon in the Attributes & Claims section.
    Note: You can make changes as needed by your organization.
  13. Under SAML Signing Certificate, click Download next to Certificate (Base 64) and save it to your computer.
  14. Scroll to Set up Zoom and expand the Configuration URLs section.
  15. Open a new browser tab/window and sign in to the Zoom web portal.
  16. In Zoom, in the navigation menu, under Admin, click Advanced, then click Single Sign-On.
  17. In Azure, navigate under the Configuration URLs section, then do the following from Azure to Zoom:
  18. In Zoom, for Service Provider (SP) Entity ID, select the version of your vanity URL without https, eg. yourvanityurl.zoom.us
  19. In Zoom, for Binding, select HTTP-Post.
  20. In Zoom, click Save Changes.

How to assign Azure users and groups to Zoom

  1. In the Azure portal, click Azure Active Directory.
  2. Click Enterprise Applications.
  3. Click the Zoom SAML application you created.
  4. Click the Assign users and groups tile.
  5. Click Add user/group.
  6. Click Users and groups.
  7. Search for the users or groups you want to add and click on them.
    Selected users and groups will show up in the Selected items section.
  8. At the bottom of the page, click the Select button when done adding users and groups.
  9. Under Select Role, click None Selected.
  10. Select the role type that you would like to designate for user licensing in Zoom.
    Note: This role type selection only applies to the auto-provisioning process described below. Licensing assigned through SAML will need to be configured in Advanced SAML Mapping if you are not using Azure auto-provisioning.
  11. Click Select.
  12. Click Assign.

How to set up Group Mapping (Optional)

Azure is not configured to send groups to Zoom via SAML by default. Follow these steps if you want to configure groups to be sent to Zoom via SAML for Advanced SAML Mapping configuration.

  1. In the Azure portal, click Azure Active Directory.
  2. Click Enterprise Applications.
  3. Click the previously created Zoom app.
  4. Click Single sign-on or the Set up single sign on tile
  5. In the Attributes & Claims section, click Edit.
  6. Click Add a group claim
  7. In the Group Claims panel, do the following:
  8. Click Save.
  9. Log in to your Single Sign-On Configuration and refer to Advanced SAML Mapping for details on Advanced SAML Mapping in Zoom.
  10. To use the SAML Attribute for Groups, enter the following information:

(Optional) Mapping Basic Information

  1. Login to your Single Sign-On Configuration page in the Zoom web portal.
  2. Click SAML Response Mapping.
  3. The first section of this page covers Basic SAML Information Mapping. Add the Source Attribute listed below for the corresponding value.
NameSource Attribute
Email Addresshttp://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
First Namehttp://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname
Last Namehttp://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname
Phone Numberhttp://schemas.xmlsoap.org/ws/2005/05/identity/claims/phone
Departmenthttp://schemas.xmlsoap.org/ws/2005/05/identity/claims/department

(Optional) How to set up Auto Provisioning (SCIM) in Azure AD

Auto-provisioning allows the management of users within Zoom from Azure utilizing SCIM. SCIM is a subset of the Zoom APIs specific to user management.

If a user is added to Azure and/or assigned the Zoom app, they will be provisioned in Zoom automatically. If the user is unassigned or deactivated in Azure, they will be deactivated in Zoom as well.

Notes:

  1. Click the following link to enable OAuth support in Azure and sign in if you are not already signed in.

    Note: OAuth will not be available if you do not use the above link.

  2. Click the Azure Active Directory icon. If it is not showing, you may find it under More Services in the left panel.
  3. Click Enterprise Applications.
  4. Click the Zoom application you created.
  5. Under Manage, click Provisioning.
  6. Click Get Started
  7. Under Provisioning Mode select Automatic.
  8. In the Provisioning page, expand Admin Credentials, and do the following:
  9. Sign in to the Zoom Web portal if you are not already signed in.
  10. Click Test Connection, to confirm that Azure is able to connect to Zoom via API.
    Note: It may take a few minutes for Azure to save the settings on the back end. Until the settings are appropriately set on the back end, the test connection may return a test failure. Please wait a few minutes and attempt Test Connection again.
  11. Click Save.
    Note: for additional SCIM configuration options and guidance, submit a request to Zoom Support.