Configuring OIDC Single Sign-On (SSO)

Requirements for configuring OIDC Single Sign-On (SSO)

• Zoom administrator privileges
• OIDC configuration information from your Identity Provider (IdP)

How to configure OIDC Single Sign-On (SSO)

1. Obtain OIDC Configuration Information

   You can configure OIDC endpoints using one of the following methods:

   • Auto-Discovery (Recommended)

     • Enter your OIDC discovery document URL in the Discovery document URL field.
       (e.g., https://your-idp.com/.well-known/openid-configuration )
     • Click the Retrieve Data button.
       The system will automatically populate the endpoint information
       
       

     • Manual Configuration
       

       Manually fill in the following required fields (marked with *):
       
        

       Field	Description
       Issuer *	The issuer identifier of your Identity Provider
       Authorization endpoint URL *	The authorization endpoint URL
       Token endpoint URL *	The token endpoint URL
       User info endpoint URL	The user info endpoint URL (optional)
       JWKS URL *	The JSON Web Key Set URL
       End session endpoint URL	The logout endpoint URL (optional)

2. Configure Client Credentials

   • Enter the Client ID obtained from your Identity Provider.
   • Enter the corresponding Client secret.

3. Configure OAuth Scopes
   

   Select the required permission scopes in the Scopes field. Default values are openid and email.

4. Register Callback URLs with Your Identity Provider

   Copy the following URLs and add them to your Identity Provider configuration:
   • Callback URL: Used for SSO login callback
   • Post-logout redirect URL: Used for post-logout redirection
     Tip: Click the Copy button next to each field to quickly copy the URL.

5. Configure User Provisioning

   Select the user creation method from the Provision User dropdown.
   
    

   Option	Description
   At Sign-In (Default)	User accounts are automatically created when users first sign in via SSO
   Pre-provision	User accounts must be created in Zoom before SSO sign-in

6. Save Configuration

   After completing all the configurations, click the Save button at the bottom of the page.

    

How to switch between SSO methods

From SAML to OIDC

If you're currently using SAML authentication, you can switch to OIDC by clicking the Configure SSO via OIDC button.

Note: After switching to OIDC/SAML, the original SAML/OIDC configuration will be retained, and you can switch back at any time.

From OIDC to SAML

Note: The switch will only take effect after you save your changes.