Integrating SailPoint with Zoho CRM
Zoho CRM is a customer relationship management platform that helps businesses streamline their sales, marketing, and customer support processes. It provides tools for managing leads, tracking deals, automating workflows, and engaging with customers across multiple channels, including email, phone, and social media. This document provides instructions to configure a new direct connection to a Zoho CRM source. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.
Note
To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.
Supported Features
The Zoho CRM connector supports the following:
Account Management
- Aggregate Users
Entitlement Management
- Aggregate Role, Profile, and Territory
Important
Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
- Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
- Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.
These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.
Prerequisites
Ensure the following prerequisites are met before proceeding with the configuration:
- Access to a Zoho Developer Console account.
- Generate and store the OAuth Refresh Token using the Zoho OAuth 2.0 process.
Follow the steps below to generate a Refresh Token:
- Create an OAuth Client:
- Go to the Zoho API Console.
- Click Add Client.
- Select Server-based Client.
- Enter:
Client Name.Homepage URL.Redirect URI.
- Click Create.
- Save the Client ID and Client Secret.
- Get the Authorization Code:
- Paste the URL in a browser:
https://accounts.zoho.in/oauth/v2/auth?scope=ZohoCRM.users.ALL,ZohoCRM.modules.ALL,ZohoCRM.settings.ALL&client_id=YOUR_CLIENT_ID&response_type=code&access_type=offline&redirect_uri=YOUR_REDIRECT_URI - Replace
YOUR_CLIENT_IDandYOUR_REDIRECT_URIwithClient IDandRedirect URI. - Copy the Authorization Code from the URL:
https://your-redirect-uri.com/?code=AUTHORIZATION_CODE
- Paste the URL in a browser:
- Generate Exchange Code for Tokens:
- Send a
POSTrequest to Zoho’s Token endpoint:- URL:
https://accounts.zoho.in/oauth/v2/token. - Header:
Content-Type: application/x-www-form-urlencoded. - Body:
client_id=YOUR_CLIENT_ID &client_secret=YOUR_CLIENT_SECRET &code=AUTHORIZATION_CODE &redirect_uri=YOUR_REDIRECT_URI &grant_type=authorization_code.
- URL:
- Save the
refresh_token.
- Send a
Required Permissions
- Zoho uses region-specific domains. Use the top-level domains (TLDs)/domain name extension based on your account’s location.
-
The OAuth Token used must have the following scopes:
Important
Using the
READpermission, instead ofALL, will restrict the connector’s access to only reading data. This means that any write operations, such as provisioning, updating, or assigning entitlements, will be prohibited.ZohoCRM.users.ALLZohoCRM.modules.ALLZohoCRM.settings.ALL
Note
For detailed information on supported OAuth scopes, see: - Scopes | Online Help - Zoho CRM The linked document is not maintained by SailPoint and is subject to change without notice.