Prerequisites

1. An Abstract Enterprise account with administrator privileges.
   

Configure SAML in Zoho One/Directory

1. Sign in to Zoho One/Directory , then click Admin Panel in the left menu.
   
2. In Zoho One, go to Marketplace and click Browse Applications. In Zoho Directory, go to Applications and click Add Application.
   
3. Use the search bar to find and add Abstract.
   
   Abstract - Zoho One Marketplace
   
       
   Abstract - Zoho Directory
   
4. Click Add.
   
5. Click Single Sign-On.
   
6. Click Service Provider Details, to check and verify the SP details. You can also edit them, if needed.
   
7. Click Identity Provider Details, then copy the Issuer, the Sign-in URL, and the X.509 Certificate.
   
   
   
   

Configure SAML in Abstract

1. Sign in to the Abstract web app as an admin.
   
2. On the left side of the screen, click on your profile name and select your organization.
   
3. Next to the organization name, click .
   
4. Click Permissions, then scroll down to Configure SSO section.
   
5. Enter the Sign-in URL in the Metadata URL field and the IdP Issuer in the Entity ID field.
   
6. Click Test with my Account. If the test fails, contact Abstract's support team and have them manually enable SSO for you.
   
7. Enable Activate SSO, then click Save Changes.
   

NOTE: To allow users to sign in using their credentials even after enabling SAML SSO, enter their email addresses in the Manual Exceptions section.

Just-in-time provisioning

Test the SAML connection

1. Return to the Admin Panel.
   
2. Go to Applications, then click Abstract.
   
3. Click Assign Users, choose yourself from the list, then click Assign.
   
4. Click . If everything is working, you should be automatically signed in and taken to Abstract's homepage.
   
                                             
   
5. After successfully testing the connection, you can start assigning the app and make it available for all users in their My Apps pages.
   
   
   
   

Enforce SAML SSO

1. Sign in to the Abstract web app as an admin.
   
2. On the left side click on your profile name and select your organization.
   
3. Beside the organization name, click .
   
4. Click Permissions, then scroll down to the Configure SSO section.
   
5. Remove all the user email addresses listed in the Manual Exceptions section.
   
6. Click Save Changes.