Request for Preliminary Confirmation Regarding SaaS Integration with Zoom

App Marketplace
1

We are currently developing an enterprise SaaS platform and are exploring integration with Zoom. We would like to confirm whether the following integration approach complies with Zoom’s Terms of Service and API usage policies:

  1. The SaaS provider develops and publishes a Zoom app.
  2. The administrator of the enterprise using the SaaS platform installs the Zoom app provided by the SaaS vendor.
  3. Enterprise users utilize the app’s Client ID and Client Secret to access Zoom account information of members within their organization.
  4. Our system uses the Client ID and Secret to call Zoom APIs and create meetings hosted by organizational members.

This integration is designed to streamline meeting creation and management for enterprise clients within our platform. We would greatly appreciate your guidance on whether this approach aligns with Zoom’s policies, or if any modifications are necessary.

As we are still in the evaluation phase, we are unable to provide concrete service implementation details at this stage. However, we would be grateful if you could share the relevant information with us.

2

Hello @minamisono

Thank you for outlining your integration approach. To understand the available distribution methods for your Zoom integration, please review our distribution guide here: https://developers.zoom.us/docs/distribute/

Regarding your proposed workflow, using the app’s Client ID and Client Secret in a way that requires enterprise users to obtain or handle those credentials is not permitted under our Terms of Use. You can review the relevant policies here:
https://www.zoom.com/en/trust/marketplace-terms-of-use/
https://www.zoom.com/en/trust/legal/zoom-api-license-and-tou/

End users should authorize the app through the standard OAuth flow, or an account administrator can install the app for the organization. Once the app is authorized, your integration may make API calls on behalf of users or the account, depending on the app type and granted scopes. Distributing or exposing the app’s credentials to users is not allowed.

If you need guidance on the correct app type or authorization model for your use case, I am happy to help.

Best,

Yoon