Zoom uses Just-In-Time (JIT) provisioning with Single Sign-On by default. This means that when a user tries to log in, a Zoom account will be created for them based on your SAML mapping. However, if you do not want Zoom accounts to be automatically created when a user attempts to sign in, you can use pre-provisioning instead and create users via REST API or CSV.
Note: Newly created users that do not match an approved associated domain on your account will be sent an email to verify their email address.
This article covers:
- Zoom account with SSO configured
- Account owner permissions
- Login to your Zoom account and navigate to the Single Sign-On page.
- Click Edit.
- Next to Provision User, choose Prior to Sign-In.
- Click Save Changes.
Adding Users via REST API
When pre-provisioning is enabled for your account, the ssoCreate API call will also be enabled for your account. Users created with this API call will only be able to login via SSO. No password will be created.
If the user is a Licensed user, the API call will generate a Personal Vanity URL using the user name (no domain) of the provisioning email. If user name or PMI is invalid or occupied, it will generate a random number/random personal vanity URL.
Adding Users via CSV
- Create a spreadsheet with the following columns: email, first_name, last_name, department, user group
- Save the spreadsheet as a CSV (comma delimited) file.
- Login to User Management.
- Click Import.
- Designate Basic, Licensed, or On-Prem as the license type. Select any features you would like to apply. This pertains to all users included in the CSV file.
- Check SSO User.
- Click Upload CSV file to find your .csv file
- Click on your .csv file, then choose Open.
- The users will be automatically approved and appear in your users list.