If you want to configure SAML authentication together with identity federation for Zoom, follow the steps below.
For instructions on configuring SAML authentication without identity federation, click here.

Note: Prior application with Zoom is required.
Note: You must apply for a vanity URL with Zoom and have it approved.

TrustLogin Admin Page Settings

1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register SAML App" button in the upper right of the screen.
   
   
   
   
2. Register the "Application Name" and "Icon" (optional).
   
   
   
   
3. Note down the "Identity Provider URL" and "Issuer / Entity ID" under "Identity Provider Information", and download the certificate using "Get Certificate".
   
   
   
   
4. Configure each item under "Service Provider Settings" as follows.
   
   

   Login URL	https://your-vanity-URL/saml/SSO
   Entity ID	https://your-vanity-URL
   Name ID Format	Select "emailAddress"
   ACS URL for the Service	https://your-vanity-URL/saml/SSO

   
   
   
   
   
5. Click the "Register" button to save the settings.
   
   
   

Zoom Settings

1. [SSO Settings]
   Using a Zoom owner or administrator account, open "Advanced > Single Sign-On > Configure SSO manually".
   
   
   
   
2. Using the information you noted down in step 3 of "TrustLogin Admin Page Settings" above, configure each item as follows, then save with the "Save Changes" button.
   
   
   
   

   ①Sign-in page URL	The "Identity Provider URL" you noted down from TrustLogin
   ②Sign-out page URL	Leave blank
   ③Identify the IdP certificate	Open the certificate downloaded from TrustLogin, then copy and paste only the lines excluding the opening and closing "-----BEGIN CERTIFICATE-----" and "-----END CERTIFICATE-----" lines.
   ④Service Provider (SP) Entity ID	The vanity URL (excluding "https://") Example: xxxxxxx.zoom.us
   ⑤Issuer (IdP Entity ID)	The "Issuer / Entity ID" you noted down from TrustLogin
   ⑥Binding	Select "HTTP-POST"
   ⑦Signature Hash Algorithm	Select "SHA-256"
   ⑧User Provisioning	Select "At Sign In (Default)"

3. [SAML Response Mapping Settings]
   More detailed control over user attributes is configured on the SAML Response Mapping screen.
   Open "Advanced > Single Sign-On > SAML Response Mapping".
   
   
   
   
4. Select the "Default User Type" in SAML Basic Information Mapping. Users will be created in Zoom with the type you select here. You can change this setting using "Edit" to the right of the item.
   
   None: Do not provision users via SAML JIT
   Basic: Create users as Basic (free) users
   Licensed: Create users as Licensed users
   On-Prem: Create users as On-Prem type
   
   For more information about user types, click here.
   
   
   
   
5. SAML Basic Information Mapping
   When SAML JIT creates or syncs users, the values of the SAML attributes you configure here are passed to Zoom.

   You can change the settings by opening "Mapping to SAML Attribute" to the right of each item.
   There is no fixed rule for SAML attribute names, so set any string that is easy to understand.
   (In this example, urn:oid:email is used.)

   
   
   
   Some items also have an "Update at each SSO login" checkbox.
   Turning this checkbox on will sync the value of the corresponding SAML attribute to Zoom every time the user signs in.
   
   
   
   

6. SAML Detailed Information Mapping
   If a SAML attribute value contains a specific value, you can set conditions so that the user is automatically classified into a user type, add-on plan, user role, user group, user group administrator, Zoom Rooms administrator, IM group, and so on.

   Note: SAML attribute names are arbitrary, but must match the corresponding attribute on the TrustLogin side.
   Note: SAML Detailed Information Mapping takes priority over SAML Basic Information Mapping.
   Example: If the user type is configured in Detailed Information Mapping, the user is created with the user type set there, and the default user type in Basic Information Mapping is ignored.
   
   

   Example:
   ・If the urn:oid:type attribute contains the text "Licensed", a Licensed user is created.
   If it contains the text "Basic", a Basic user is created.

   ・If the urn:oid:permission attribute contains the text "Member", the user is created as a Member.
   If it contains the text "Admin", the user is created as an Admin.

   
   
   

7. SAML Automatic Mapping
   If a SAML attribute is not found in Detailed Information Mapping, Zoom user attributes are mapped to the SAML attribute you specify.

   Example:
   Set "urn:oid:department" as the department information item,
   and suppose a certain user's attribute has the value "Technical Department".

   If a group named "Technical Department" does not already exist in Zoom, it will automatically be created and the user will be assigned to it.
   
   

TrustLogin SAML Attribute Settings

Configure the mapping between the SAML attribute names set in Zoom and the corresponding attribute values on the TrustLogin side.

1. Open the "Admin Page > App" menu, search for the app name you created using "Search App", and open the app settings screen from the app name.
   
   
   
   
2. Open "Edit SAML App Settings".
   
   
   
   
3. Under "SAML Attribute Settings", add settings one at a time using "Add SAML Attribute".
   
   

   Attribute Designation Name = Attribute Name	The SAML attribute name set in Zoom
   Attribute Type	Select Basic
   Attribute Value	Select or enter the corresponding TrustLogin attribute value

   　
   
   
   
   

   For instructions on how to configure custom attributes, please refer to the following pages.

   • Custom Attribute Setup Instructions (Individual Registration)
   • Custom Attribute Setup Instructions (Bulk Registration)
   
   
   
4. Click "Register" to save the settings.
   
   

TrustLogin User Settings

① When a User Adds the App from My Page

1. Click the "Add App" button on "My Page".
2. On the "Register App" screen, select the app and click the "Next" button in the upper right of the screen.
3. If you want to change the "Display Name", enter it, then click the "Register" button.
4. Click the app on "My Page" or in the "browser extension" and confirm that sign-in succeeds.
   
   

② When an Administrator Adds Members

1. Search for and click the app in the "Admin Page > App" menu.
2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.
   
   

Sign in using one of the methods below, and confirm that the user is created/synced on the Zoom side according to your configuration.

How to Sign In to Zoom

① Signing In from the Vanity URL

• Click the app on "My Page" or in the "browser extension". Once sign-in succeeds, the vanity URL screen shown below will appear — click "Sign In" to complete sign-in.
• If you open the vanity URL directly while not signed in to TrustLogin, the TrustLogin sign-in screen will open after you click "Sign In". Signing in there will sign you in to Zoom.
  
  
  
  

② Signing In from the Zoom Top Page

1. Open the Zoom top page and click "Sign In".
   
   
   
   
2. Select "Sign In with SSO".
   
   
   
   
3. Enter the domain name of your vanity URL.
   
   
   
   
4. The TrustLogin sign-in screen will open. Signing in there will sign you in to Zoom.

③ Using the Zoom App (Desktop/Mobile)

1. Open the Zoom app and click "Sign In".
   
   
   
   
2. Click "SSO" and enter the domain name of your vanity URL.
   
   
   
   
   
3. The TrustLogin sign-in screen will open. Signing in there will redirect you to Zoom.