Configuring Zoom with Microsoft Entra (previously known as Azure)

You can connect Zoom with Microsoft Entra to use your company's Microsoft Entra credentials to log in to your Zoom account via Single Sign-On (SSO). You can assign users Zoom licenses based on their group in Microsoft Entra.

Note: As of September 8, 2023, customers are longer be able to create new JWT apps. Authentication for tokens created using the JWT app type will stop functioning on this day, so to prevent disruption we recommended migrating to OAuth authentication as soon as possible.

Requirements for configuring Zoom with Microsoft Entra

Note: Without an approved associated domain, users will need to confirm to be provisioned on the account through an email automatically sent to them. Provisioning will take place without email confirmation for any users falling under an approved domain.

Table of Contents

How to add Zoom from the Microsoft Entra application gallery

  1. Sign in to the Microsoft Entra admin center.
  2. Browse to Identity > Applications > Enterprise applications > All applications.
  3. Search for and click Zoom.
  4. Cick Add.

How to configure Single Sign-On with Microsoft Entra 

  1. Sign in to the Microsoft Entra admin center.
  2. Browse to Identity > Applications > Enterprise applications > All applications.
  3. Search for the Zoom application and click on the Zoom tile.
  4. (Optional) On the left of the page under Name, you can rename the application as you wish.
    Note: We highly recommend renaming the app to avoid confusion with other Zoom applications.
  5. Click Create.
    The overview page will appear once complete.
  6. Click Set up single sign-on.
  7. Under Select a single sign-on method, select SAML. 
  8. Click the edit icon for Basic SAML Configuration. 
  9. Fill out the following fields:
  10. Click Save.
  11. To view the claims being passed by Microsoft Entra, click the pencil icon in the Attributes & Claims section. 
    Note: You can make changes as needed by your organization.
  12. Under SAML Signing Certificate, click Download next to Certificate (Base 64) and save it to your computer.
  13. Scroll to Set up Zoom and expand the Configuration URLs section.
  14. Open a new browser tab/window and sign in to the Zoom web portal.
  15. In Zoom, in the navigation menu, under Admin, click Advanced, then click Single Sign-On.
  16. In Microsoft Entra, navigate under the Configuration URLs section, then do the following from Microsoft Entra to Zoom:
  17. In Zoom, for Service Provider (SP) Entity ID, select the version of your vanity URL without https, eg. yourvanityurl.zoom.us
  18. In Zoom, for Binding, select HTTP-Post.
  19. In Zoom, click Save Changes.

How to configure Multiple vanity URLs & IDPs SSO

  1. Sign in to the Microsoft Entra admin center.
  2. Browse to Identity > Applications > Enterprise applications > All applications.
  3. Search for the Zoom application and click on the Zoom tile.
  4. (Optional) On the left of the page under Name, you can rename the application as you wish.
    Note: We highly recommend renaming the app to avoid confusion with other Zoom applications.
  5. Click Create.
    The overview page will appear once complete.
  6. Click Single sign-on.
  7. Under Select a single sign-on method, select SAML.
  8. Click the edit icon for Basic SAML Configuration.
  9. Fill out the following fields:
  10. Under SAML Signing Certificate, click Download next to Certificate (Base 64) and save it to your computer.
  11. Scroll to Set up Zoom and expand the Configuration URLs section.
  12. Open a new browser tab/window and sign in to the Zoom web portal.
  13. In Zoom, in the navigation menu, under Admin, click Advanced, then click Single Sign-On.
  14. Click Add SSO configuration
  15. In Microsoft Entra, navigate under the Configuration URLs section, then do the following from Microsoft Entra to Zoom:
  16. In Zoom, for Service Provider (SP) Entity ID, the format is https://zoom.us/sp/{unique id}. After saving the SAML configuration, the id will be generated
  17. In Zoom, for Binding, select HTTP-Post.
  18. In Zoom, click Save Changes.
  19. Download the Zoom SP metadata from https://[yourvanityurl].zoom.us/saml/metadata/sp?samlAppId={unique id}. The unique ID is the ending part of the SP entity ID
  20. Go back to the SAML configration page in Microsoft Entra
  21. Click the edit icon for Basic SAML Configuration.
  22. Fill out the following fields:
  23. Click Save.
  24. To view the claims being passed by Microsoft Entra, click the pencil icon in the Attributes & Claims section. 
    Note: You can make changes as needed by your organization.

How to assign Microsoft Entra users and groups to Zoom

  1. Sign in to the Microsoft Entra admin center.
  2. Browse to Identity > Applications > Enterprise applications.
  3. Click the Zoom SAML application you created.
  4. Click the Assign users and groups tile.
  5. Click Add user/group.
  6. Click Users and groups.
  7. Search for the users or groups you want to add and click on them.
    Selected users and groups will show up in the Selected items section.
  8. At the bottom of the page, click the Select button when done adding users and groups.
  9. Under Select Role, click None Selected.
  10. Select the role type that you would like to designate for user licensing in Zoom.
    Note: This role type selection only applies to the auto-provisioning process described below. Licensing assigned through SAML will need to be configured in Advanced SAML Mapping if you are not using Microsoft auto-provisioning.
  11. Click Select.
  12. Click Assign.

How to set up Group Mapping (Optional)

Microsoft Entra is not configured to send groups to Zoom via SAML by default. Follow these steps if you want to configure groups to be sent to Zoom via SAML for Advanced SAML Mapping configuration.

  1. Sign in to the Microsoft Entra admin center.
  2. Browse to Identity > Applications > Enterprise applications.
  3. Click the Zoom SAML application you created.
  4. Click Single sign-on or the Set up single sign on tile.
  5. In the Attributes & Claims section, click Edit.
  6. Click Add a group claim.
  7. In the Group Claims panel, do the following:
  8. Click Save.
  9. Sign in to your Single Sign-On Configuration and refer to Advanced SAML Mapping for details on Advanced SAML Mapping in Zoom.
  10. To use the SAML Attribute for Groups, enter the following information:

(Optional) Mapping Basic Information

  1. Sign in to your Single Sign-On Configuration page in the Zoom web portal.
  2. Click SAML Response Mapping.
  3. The first section of this page covers Basic SAML Information Mapping. Add the Source Attribute listed below for the corresponding value.
NameSource Attribute
Email Addresshttp://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
First Namehttp://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname
Last Namehttp://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname
Phone Numberhttp://schemas.xmlsoap.org/ws/2005/05/identity/claims/phone
Departmenthttp://schemas.xmlsoap.org/ws/2005/05/identity/claims/department

(Optional) How to set up Auto Provisioning (SCIM) in Microsoft Entra ID

Auto-provisioning allows the management of users within Zoom from Microsoft Entra utilizing SCIM. SCIM is a subset of the Zoom APIs specific to user management.

If a user is added to Microsoft Entra and/or assigned the Zoom app, they will be provisioned in Zoom automatically. If the user is unassigned or deactivated in Microsoft Entra, they will be deactivated in Zoom as well.

Notes:

  1. Click the following link to enable OAuth support in Microsoft Entra and sign in if you are not already signed in.
    Note: OAuth will not be available if you do not use the above link.
  2. Browse to Identity > Applications > Enterprise applications.
  3. Click the Zoom application you created.
  4. Under Manage, click Provisioning.
  5. Click Get Started.
  6. Under Provisioning Mode select Automatic.
  7. In the Provisioning page, expand Admin Credentials, and do the following:
  8. Sign in to the Zoom Web portal if you are not already signed in.
  9. Click Test Connection, to confirm that Microsoft Entra is able to connect to Zoom via API.
    Note: It may take a few minutes for Microsoft Entra to save the settings on the back end. Until the settings are appropriately set on the back end, the test connection may return a test failure. Please wait a few minutes and attempt Test Connection again.
  10. Click Save.
    Note: for additional SCIM configuration options and guidance, submit a request to Zoom Support.