Integrating SailPoint with Zoho Invoice
Zoho Invoice is a cloud-based invoicing and billing platform developed by Zoho that helps freelancers and small businesses manage their billing, payments, and client interactions in a streamlined and automated way. This document provides instructions to configure a new direct connection to a Zoho Invoice source. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.
Note
To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.
Supported Features
The Zoho Invoice connector supports the following:
Account Management
- Aggregate Accounts (Users)
Entitlement Management
- Aggregate Groups (Roles)
Important
Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
- Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
- Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.
These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.
Prerequisites
Ensure the following prerequisites are met before proceeding with the configuration:
Register an Application in Zoho
Zoho APIs require OAuth-based authentication. Before you access the Zoho Invoice APIs, you must register an application in the Zoho Developer Console. To register an application:
- Log in to the Zoho API Console.
- Create a new application.
- Select Server-based Application.
-
Provide the following details:
- Client Name
- Homepage URL
- Redirect URI
-
After registration, the system generates the following credentials:
- Client ID
- Client Secret
- These credentials are required to authenticate API requests.
Obtain Authorization Code
- To authorize API access, generate an authorization code using the OAuth authorization endpoint.
- Authorization URL:
https://accounts.zoho.com/oauth/v2/auth
- Example authorization request:
https://accounts.zoho.com/oauth/v2/auth
?scope=ZohoInvoice.settings.READ
&client_id=CLIENT_ID
&response_type=code
&redirect_uri=REDIRECT_URI
&access_type=offline
http://localhost:3000/callback?code=AUTHORIZATION_CODE.
Generate Access and Refresh Tokens
- You must exchange the authorization code for access tokens.
- Token endpoint:
grant_type=authorization_code
- client_id
- client_secret
- redirect_uri
- code
- Example request:
- Response includes:
- access_token
- refresh_token
- expires_in
- api_domain
- The refresh token is used to generate new access tokens when the existing token expires. For more information about registering an OAuth App, refer Zoho Invoice API Documentation.
Required Permissions
OAuth Scope Requirements
- To access user and role information through the Zoho Invoice API, the OAuth token must include the required scope. Recommended scope for integrations:
ZohoInvoice.settings.READ
- This scope allows the integration to retrieve:
- Users
- Roles
For more information about OAuth scopes, refer Users API Documentation.
Note
The linked document is not maintained by SailPoint and is subject to change without notice.