Getting started with SSO

Single sign-on allows you to login using your company credentials. Zoom single sign-on (SSO) is based on SAML 2.0.

Zoom acts as the Service Provider (SP), and offers automatic user provisioning. You do not need to register as a user in Zoom. Once Zoom receives a SAML response from the Identity Provider (IdP), it checks if this user exists. If the user does not exist, Zoom creates a user account automatically with the received name ID. 

Note: If you are using SSO redirect for zoom.us, you will need to have this disabled to sign in via work email at https://meetzoom.net outside of China or at https://zoom.com inside of China to configure SSO. This can be accessed on the web at Zoom.us>Advanced>Security  under “sign in methods”. Redirect can be re-enabled after configuration is accessed via work email login. 

Requirements for getting started with SSO

• Business or Education account
• Configured Vanity URL for zoom.com
  Note: To verify if you have a vanity URL configured, simply go to change your company's vanity URL 

Instructions

First, configure your IdP to send us the following

• Any unique identifier linked to nameID such as edupersonTargetedID, persistentID or mail(Optional) Accepted attributes such are email (urn:oid:0.9.2342.19200300.100.1.3), sn (urn:oid:2.5.4.4) and and givenName (urn:oid:2.5.4.42).

Second, enter your SSO information at https://meetzoom.net/account/sso_com . See the attached example from your idP xml metadata.

• Sign-in page URL: <SingleSignOnService>
• Sign-out page URL: <SingleLogoutService>
• Certificate: <X509Certificate> * Note: Remove the Begin Certificate and End Certificate"
• Issuer: <ID of EntityDescriptor>
• Binding: Choose http-post or http-redirect
• Default user type: Basic or Licensed

Lastly, once configured, you can get the SP metadata XML file from: https://yourcompany.zoom.com/saml/metadata/sp

Once Configured

To start, all SSO users need to access https://yourcompany.zoom.com to login using a browser, or if you login from the desktop or mobile client, you need to enter domain name of your vanity URL under SSO login.