CONFIGURE OPENID SSO

Connect an external OpenID Connect identity provider to enable single sign-on for your organization. Follow the steps below to register your client application and link it to ZeroBounce.

Create a client application in your identity provider

In your OpenID Connect IdP (e.g. Okta, Auth0, Azure AD), create a new client application. Refer to your provider's documentation for exact steps.

Register your client application with ZeroBounce

Set the following as your authorization server endpoint in the client application:

https://okta.zerobounce.net/oauth2/v1/authorize

Add the redirect URI

https://okta.zerobounce.net/oauth2/v1/authorize/callback

Provide credentials and endpoints

Back in ZeroBounce, supply the following values from your identity provider:

Client ID

Client Secret

IDP issuer URL

Authorization endpoint

Token endpoint

JWKS endpoint

Before you enable SSO

Enabling SSO will disable all other sign-in methods — including passwords and social logins. Only the external SSO option will remain available for your account.
If 2FA is active on both your ZeroBounce account and your OpenID client, users will need to verify from both sources on each login. To streamline this, disable 2FA on one of the two.