# Login using SSO

**URL:** <https://devforum.zoom.us/t/login-using-sso/18254>\
**Category:** Android\
**Created:** [May 19, 2020, 6:40am UTC](https://devforum.zoom.us/t/login-using-sso/18254 "2020-05-19T06:40:21Z")\
**Posts on this page:** 14\
**Page:** 1

<div class="post-metadata">

**Author:** ![grey-bit](https://avatars.discourse-cdn.com/v4/letter/g/958977/32.png) [@grey-bit](https://devforum.zoom.us/u/grey-bit)\
**Post date:** [May 19, 2020, 6:40am UTC](https://devforum.zoom.us/t/login-using-sso/18254/1 "2020-05-19T06:40:21Z")

</div>

I would like my mobile app to offer SSO based login capabilities, similar to how standard Zoom client provides them.  
Users should either provide a Zoom domain or email and should be taken to the domain-specific SSO page.

My understanding is that from the SDK perspective, it’s only interested in the SSO token that is returned by the SSO page of the specific domain. It’s the app’s responsibility to present the SSO page and to accept redirects that bring back the token, correct?

Assuming that the above is correct, I have three questions:

1. If the user provides a domain name (let’s say [xxx.zoom.us](http://xxx.zoom.us)), what URL should I open to the user? Is there any API or convention for constructing these URLs?
2. If the user provides an email address, how do I find out the user’s domain? Alternatively, is there a way to retrieve the SSO URL directly from the email address?
3. How do I provide my own redirect URL for the SSO service to return the token to me?

---

<div class="post-metadata">

**Author:** ![carson.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/carson.zoom/32/785_2.png) [@carson.zoom](https://devforum.zoom.us/u/carson.zoom)\
**Post date:** [May 21, 2020, 9:39am UTC](https://devforum.zoom.us/t/login-using-sso/18254/2 "2020-05-21T09:39:11Z")

</div>

Hi [grey-bit](https://devforum.zoom.us/u/grey-bit),

Thanks for the post and pardon the late response. Regarding your questions:

> [@grey-bit](#):
>
> My understanding is that from the SDK perspective, it’s only interested in the SSO token that is returned by the SSO page of the specific domain. It’s the app’s responsibility to present the SSO page and to accept redirects that bring back the token, correct?

Yes, you are correct. And regarding your other questions, you will need to set up an SSO integration with us on Zoom web portal, and the process varies based on your IDP. The following support pages could be helpful:

- [Knowledge Base - Zoom Support](https://support.zoom.us/hc/en-us/sections/200305453-Single-Sign-On)

Hope this helps. Thanks!

---

<div class="post-metadata">

**Author:** ![grey-bit](https://avatars.discourse-cdn.com/v4/letter/g/958977/32.png) [@grey-bit](https://devforum.zoom.us/u/grey-bit)\
**Post date:** [May 21, 2020, 7:48pm UTC](https://devforum.zoom.us/t/login-using-sso/18254/3 "2020-05-21T19:48:23Z")

</div>

Please correct me if I am wrong, but the provided link is for the companies that want to integrate their SSO to Zoom.

What I need is the way for my independent Android app to allow its users to log into any user account (any domain) using the same mechanisms that the regular Zoom app provides - direct email/password or any **SSO that is integrated with Zoom (not with the app directly).**

I saw quite a few similar threads on the forums, but none had a definitive guidance on how to make it happen ☹

---

<div class="post-metadata">

**Author:** ![carson.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/carson.zoom/32/785_2.png) [@carson.zoom](https://devforum.zoom.us/u/carson.zoom)\
**Post date:** [May 23, 2020, 3:45am UTC](https://devforum.zoom.us/t/login-using-sso/18254/4 "2020-05-23T03:45:09Z")

</div>

Hi @grey-bit,

Thanks for the reply. I understand, for the SSO login on the regular Zoom client, in order to use it, the company needs to have SSO integration with Zoom first, otherwise it won’t work. You will need to first enter your company/3rd party(like Google) domain:

 ![image](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/2X/b/bbb438e36827f22ac6beb43432460339a9faa6d3.png)  
Then it will redirect to your company/3rd party login page to login; After a successful login, the service provider will return a response with the zoom token, in which is what the loginWithSSO is looking for. Here is a screenshot of SSO login with Google, and the one in red box is the SSO token you could pass to the interface:  
 ![Screen Shot 2020-05-21 at 10.34.04 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/2X/b/bf8f5322b8bf36c01daa8d1b51e1114adf34f3d4.png)

Other than the above process, there is no other way to do SSO login with SDK.

Hope this helps. Thanks!

---

<div class="post-metadata">

**Author:** ![grey-bit](https://avatars.discourse-cdn.com/v4/letter/g/958977/32.png) [@grey-bit](https://devforum.zoom.us/u/grey-bit)\
**Post date:** [May 23, 2020, 5:09am UTC](https://devforum.zoom.us/t/login-using-sso/18254/5 "2020-05-23T05:09:09Z")

</div>

Thanks @carson.zoom,

Browsing to https://some\_company.zoom.us doesn’t forward to the company login page.  
Try [https://linkedin.zoom.us](https://linkedin.zoom.us) as an example (I am not related to linkedin in any way. Just using them as an example).  
I recorded HTTP transactions on the regular Zoom webpage and the way it works when you specify linkedin domain, is that the page executes POST [https://zoom.us/web/sso/login](https://zoom.us/web/sso/login) with domain:linkedin.com in the form data. Then it receives 302, redirecting it to [linkedin.okta.com](http://linkedin.okta.com) and the rest is the way you mentioned.  
Similar process for email based SSO: POST [https://zoom.us/web/sso/email\_login](https://zoom.us/web/sso/email_login) with [email:blabla@blabla.com](mailto:email:blabla@blabla.com) in the form data.

My problem is to reproduce this process from my own client.  
Obviously I can’t go through your website URLs - a) it’s not documented, thus not supposed to be used b)it will automatically redirect from the URL with the token to the user profile page, which I have no interest in.

Do you have a code example (like in the Android samples) that shows the right process that app developers like me can copy from?

thanks a lot for the patience and the willingness to help.

---

<div class="post-metadata">

**Author:** ![carson.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/carson.zoom/32/785_2.png) [@carson.zoom](https://devforum.zoom.us/u/carson.zoom)\
**Post date:** [May 27, 2020, 9:08am UTC](https://devforum.zoom.us/t/login-using-sso/18254/6 "2020-05-27T09:08:12Z")

</div>

Hi @grey-bit,

Thanks for the reply. Based on my understanding, I think the way you are mentioning might not work in the Zoom SSO login since:

> [@carson.zoom](#):
>
> for the SSO login on the regular Zoom client, in order to use it, the company needs to have SSO integration with Zoom first, otherwise it won’t work.

If a company has SSO integration with Zoom, then you will have a company login page(We called it vanity URL) and all the corresponding settings and configurations will be provided upon successful integration.

I do not have any code example in hand for this. I will try to poke around and see if I could find more resources for you. The SSO integration part is actually not a part of SDK integration so I do not have too many resources in hand.

Will get back to you once I found anything. Thanks!

---

<div class="post-metadata">

**Author:** ![grey-bit](https://avatars.discourse-cdn.com/v4/letter/g/958977/32.png) [@grey-bit](https://devforum.zoom.us/u/grey-bit)\
**Post date:** [June 2, 2020, 10:59pm UTC](https://devforum.zoom.us/t/login-using-sso/18254/7 "2020-06-02T22:59:57Z")

</div>

Thanks @carson.zoom.

How do I test SSO authentication? It’s my understanding that in order to test it for real, I would need a business account which is $200/mo. Free/Pro accounts don’t have SSO.

Is my understanding correct?  
Is there any other, cheaper option for the developers?

---

<div class="post-metadata">

**Author:** ![carson.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/carson.zoom/32/785_2.png) [@carson.zoom](https://devforum.zoom.us/u/carson.zoom)\
**Post date:** [June 6, 2020, 1:20am UTC](https://devforum.zoom.us/t/login-using-sso/18254/8 "2020-06-06T01:20:55Z")

</div>

Hi @grey-bit,

Thanks for the reply and pardon the late response. I don’t think there is any public resource available to test SSO authentication. For the price and plans regarding SSO, you might need to contact our sales at [https://zoom.us/contactsales](https://zoom.us/contactsales)

Hope this helps. Thanks!

---

<div class="post-metadata">

**Author:** ![roger](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/roger/32/11819_2.png) [@roger](https://devforum.zoom.us/u/roger)\
**Post date:** [July 13, 2020, 8:38pm UTC](https://devforum.zoom.us/t/login-using-sso/18254/10 "2020-07-13T20:38:04Z")

</div>

I figured out how to manually get the SSO token. Navigate to https://\<your org\>.zoom.us/saml/login?from=desktop. Then login. The resulting page will contain a link with id “sso-button” and href"zoommtg://\<your org\>.zoom.us/sso?token=\<The SSO token\>"

It would be nice if there were some automated way to get SSO tokens, and I would have appreciated it if there were some documentation about this. It took me a while to figure out. But this seems to work (at least for now).

---

<div class="post-metadata">

**Author:** ![KKumpavat](https://avatars.discourse-cdn.com/v4/letter/k/439d5e/32.png) [@KKumpavat](https://devforum.zoom.us/u/KKumpavat)\
**Post date:** [February 26, 2021, 7:46pm UTC](https://devforum.zoom.us/t/login-using-sso/18254/11 "2021-02-26T19:46:48Z")

</div>

@Roger I am also working on SSO login using Android SDK 5.2.x but I am not able to login successfully using the SSO token the way you suggested. I am using the SSO token received in “zoommtg://.zoom.us/sso?token=” url and passing the token in `loginwithSSOToken` method. Can you please help?

---

<div class="post-metadata">

**Author:** ![roger](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/roger/32/11819_2.png) [@roger](https://devforum.zoom.us/u/roger)\
**Post date:** [February 26, 2021, 8:09pm UTC](https://devforum.zoom.us/t/login-using-sso/18254/12 "2021-02-26T20:09:51Z")

</div>

If you create a free account and call `loginWithZoom` with those credentials, does that work?

---

<div class="post-metadata">

**Author:** ![KKumpavat](https://avatars.discourse-cdn.com/v4/letter/k/439d5e/32.png) [@KKumpavat](https://devforum.zoom.us/u/KKumpavat)\
**Post date:** [February 27, 2021, 5:47am UTC](https://devforum.zoom.us/t/login-using-sso/18254/13 "2021-02-27T05:47:16Z")

</div>

Yes, the application works as expected with normal zoom user having email/password. However the app is supposed to serve enterprise users and the SSO is mandatory. One more observation is that users are able to do SSO login into official zoom application. So I think the SSO configuration and token works fine with official zoom application but the SDK gives error. Not sure if we need to do any account level settings or SDK app level configuration or something related to SDK permission to use SSO login with SDK. Unfortunately there isn’t enough documentation/guide around this.

---

<div class="post-metadata">

**Author:** ![roger](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/roger/32/11819_2.png) [@roger](https://devforum.zoom.us/u/roger)\
**Post date:** [February 27, 2021, 6:03am UTC](https://devforum.zoom.us/t/login-using-sso/18254/14 "2021-02-27T06:03:32Z")

</div>

Yeah, the SSO login method really just seems to be there because they had to support this for the official Android client. Even if you did get it working, you’d still have the issue of getting the SSO token from the webpage into your app.

---

<div class="post-metadata">

**Author:** ![jon.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/jon.zoom/32/13495_2.png) [@jon.zoom](https://devforum.zoom.us/u/jon.zoom)\
**Post date:** [March 1, 2021, 5:59pm UTC](https://devforum.zoom.us/t/login-using-sso/18254/15 "2021-03-01T17:59:58Z")

</div>

Hi @KKumpavat,

Can you please verify which error you are seeing with the SSO login method so that we may investigate this further?

Thanks!
