Prerequisites

1. A Heroku enterprise account with administrator privileges.
   

Configure SAML in Zoho One/Directory

1. Sign in to Zoho One/Directory, then click Admin Panel in the left menu.
   
2. In Zoho One, go to Marketplace, then click Browse Applications. In Zoho Directory, go to Applications, then click Add Application.
   
3. Use the search bar to find and add Heroku.
   
   Heroku - Zoho One Marketplace
   
   Heroku - Zoho Directory
   
4. Enter a name for the app in the Display Name field.
   
5. In the Organization Name field, enter the name of the Heroku Enterprise team (as it appears in your Heroku dashboard) you want to enable SSO for.
   
6. Click Add.
   
7. Click Single Sign-On.
   
8. Click Service Provider Details to check and verify the SP details. You can also edit them, if needed.
   
9. Click Identity Provider Details, then download the IDP Metadata.
   
   
   
   
   

Configure SAML in Heroku

1. Sign in to your Heroku enterprise account as an administrator.
   
2. From the dashboard, select the enterprise team you want to enable SSO for.
   
3. Go to the Settings tab.
   
4. In the Single Sign On section, click Upload Metadata.
   
5. Browse for and upload the IDP Metadata downloaded from Zoho One or Zoho Directory to enable SSO.
   

Just-in-time provisioning

1. Sign in to your Heroku enterprise account as an administrator.
   
2. Select the required enterprise team from the dashboard.
   
3. Go to the Settings tab.
   
4. In the Default Role section, select the required role, then click Set Default Role.
   

Test the SAML connection

1. Return to the Admin Panel.
   
2. Go to Applications, then click Heroku.
   
3. Click Assign Users, choose yourself from the list, then click Assign.
   
4. Click . If everything is working, you should be automatically signed in and taken to Heroku's homepage.
   
   
   
   
   
5. After successfully testing the connection, you can start assigning the app and make it available for all users in their My Apps page.