CONFIGURE OPENID SSO
Connect an external OpenID Connect identity provider to enable single sign-on for your organization. Follow the steps below to register your client application and link it to ZeroBounce.
1
Create a client application in your identity provider
In your OpenID Connect IdP (e.g. Okta, Auth0, Azure AD), create a new client application. Refer to your provider's documentation for exact steps.
2
Register your client application with ZeroBounce
Set the following as your authorization server endpoint in the client application:
https://okta.zerobounce.net/oauth2/v1/authorize3
Add the redirect URI
Register this callback URL as an allowed redirect URI in your identity provider:
https://okta.zerobounce.net/oauth2/v1/authorize/callback4
Provide credentials and endpoints
Back in ZeroBounce, supply the following values from your identity provider:
Client ID
Client Secret
IDP issuer URL
Authorization endpoint
Token endpoint
JWKS endpoint
Before you enable SSO
- Enabling SSO will disable all other sign-in methods — including passwords and social logins. Only the external SSO option will remain available for your account.
- If 2FA is active on both your ZeroBounce account and your OpenID client, users will need to verify from both sources on each login. To streamline this, disable 2FA on one of the two.