Magento 2 Zoho SSOMagento 2 Zoho SSO
Buy Now
Support
Buy Now
Support
  • Getting Started

    • Introduction
    • Key Features
    • How It Works
  • Installation

    • Requirements
    • Install the Module
    • Enable & Compile
    • Verify the Installation
  • Setup

    • Activate Your Licence
    • Register a Zoho Client
    • Connect Magento to Zoho
    • Test the First Sign-In
  • Configuration

    • Overview
    • Settings Reference
    • Data Centers
    • Redirect URI
    • Scope & Store Views
    • Admin Menu
    • Access Control
  • Storefront

    • Customer Login
    • Create Account
    • Checkout Sign-In
    • Popup & Mobile Behaviour
    • Accounts & Matching
    • Messages
  • Developers

    • Routes & Endpoints
    • Data & Sessions
    • Logging
  • Help

    • Setup Problems
    • Sign-In Problems
    • FAQ

Requirements

Platform

ComponentVersion
Magento Open Source / Adobe Commerce2.4.9
PHP8.5
Composer2.x
Storefront themeLuma or a Luma-based theme

The extension is a standard magento2-module (Composer package webkul/zohosso, version 4.0.0-p1). Version 4.0.0 was released for Magento 2.4.9 with PHP 8.5.

Module dependencies

ModuleShips with Magento?
Magento_CustomerYes
Magento_CheckoutYes — needed for the checkout sign-in button

HTTPS

Your storefront must run on HTTPS. Zoho only accepts secure redirect URIs for production clients, and the popup hand-off relies on the page and the popup sharing the same secure origin.

A Zoho account

You need a Zoho account that can open the Zoho API Console in the same data center your customers use — for example api-console.zoho.com for US accounts or api-console.zoho.eu for European accounts. There you create the OAuth client that gives you the Client ID and Client Secret. See Register a Zoho Client.

Outbound network access

Your Magento server makes two server-side calls to Zoho on every sign-in: the token exchange and the profile request. Both go to your region's accounts domain over HTTPS (for example accounts.zoho.com). Hardened hosting that blocks outbound traffic needs that domain allow-listed. See Data Centers for every domain.

No database changes, no cron

The module adds no tables, no customer attributes, no cron job, and no queue consumer. Settings live in core_config_data, and customers are ordinary Magento customers.

Next: Install the Module.

Next
Install the Module