Configuring Zoom with OneLogin

You can connect Zoom with OneLogin to use your company's OneLogin credentials to log in to your Zoom account through Single Sign-On (SSO). 

This article covers:

• How to configure Zoom with OneLogin
• How to enable the API Integration to Zoom

Prerequisites for OneLogin

• Zoom owner or admin privileges
• Business or Education account with approved Vanity URL
• OneLogin Admin privileges

Note: Without an approved associated domain, users will need to confirm to being provisioned on the account through an email automatically sent to them. Provisioning will take place without email confirmation for any users falling under an approved domain.

How to configure Zoom with OneLogin

1. Log in to OneLogin Admin account at https://app.onelogin.com/apps
2. Click Add App.
3. Search for "Zoom" in the provided search field and select the Zoom application.
   
4. Edit your display name (if desired) and click Save.
5. Once saved, open the configuration tab and enter your Vanity URL subdomain only, then Save. Example is from Vanity URL of https://lukehaselwood.zoom.us
   
6. On the Configuration tab, under Zoom OAuth, click Authenticate.
7. Sign in to the Zoom web portal.
8. In the navigation panel, click Advanced, then Single Sign-On. 
   Also, navigate to the SSO tab for the Zoom application in OneLogin. The settings will need to be matched as follows:
   • OneLogin SAML 2.0 Endpoint (HTTP) > Zoom Sign-in page URL
     Important: the binding indicated in the URL needs to be changed to http-redirect.
     
     "https://app.onelogin.com/trust/saml2/http-post/sso/####"
     should be changed to:
     "https://app.onelogin.com/trust/saml2/http-redirect/sso/####"
   • OneLogin SLO Endpoint (HTTP) > Zoom Sign-out page URL
   • OneLogin Issuer URL > Zoom Issuer
     
   • For the Zoom Identity provider certificate, select View Details (shown above) under the OneLogin X.509 Certificate. Copy the text shown in the X.509 Certificate field between the Begin and End certificate and enter it in to the Zoom Identity provider certificate field
     ----BEGIN CERTIFICATE-----
     COPY THIS TEXT
     -----END CERTIFICATE-----
     
   • Select HTTP-Redirect as for the Zoom Binding
   • If you need to set up SAML Response Mapping, such as setting the default User Type, click the SAML Response Mapping tab.
9. Click Save.
10. You will also need to configure your users or groups in OneLogin to have access to the Zoom application.
11. Visit your Vanity URL and press sign in. You should be redirected to the OneLogin access page. Sign in, and Zoom will create the account, pull first/last name if available, and log the user in.

How to enable the API Integration to Zoom

1. Click Authenticate next to API Connection to connect to Zoom API over OAuth. This allows for provisioning/de-provisioning of OneLogin users to Zoom.
2. After you are prompted sign in to Zoom to authorize access to OneLogin, click Allow.
3. Sign in to Zoom as an admin with the privilege to edit account settings.
4. Click the Provisioning tab in OneLogin.
5. By Workflow, select the Enable provisioning check box.
6. Under Require admin approval before this action is performed, select the check boxes of the options you want the API to work with.
7. Click Save.