-
On the Review Setup tab:
- On the Signing Certificate line, click Download to download the signing certificate.
- On the SAML Metadata line, click Download to download the metadata file.
- In a separate tab, sign on to the Zoom admin console and go to the Single Sign-On tab.
-
In Zoom, set the Sign-in Page URL value:
- Open the metadata file in a text editor.
-
Copy the SingleSignOnService
Location
value.https://sso.connect.pingidentity.com/sso/idp/SSO.saml2?idpid=<idpid value>
-
In the Zoom admin console, paste the
Location
value into the Sign-in Page URL field.
- Optional:
In the Sign-Out page URL field, enter
https://<vanity name>.zoom.us/saml/SingleLogout
.Tip:An SLO URL improves security by ending a user session in Zoom when the user's SSO session ends.
- In the Service Provider (SP) Entity ID list, select the non-HTTPS option.
- In the Enter Issuer field, paste the entityID value from the metadata file.
-
Enter the Identity provider certificate value:
- Open the signing certificate file in a text editor.
-
Copy the contents of the signing certificate file, excluding the
BEGIN CERTIFICATE
andEND CERTIFICATE
lines. - In the Zoom admin console, paste the certificate contents into the Identity provider certificate field.
-
On the Binding line, click either
HTTP-POST or
HTTP-Redirect.
Tip:
HTTP-POST is the more secure option, because it doesn't expose the SAML token as a query parameter in the URL.
- On the Signature Hash Algorithm line, click SHA-256.
-
On the Security line, select the check boxes of the
security policies to implement.
Tip:
Improve your security by selecting Sign SAML request and Save SAML response logs on user sign-in.
- Click Save Changes.