How to create Oauth2 crednetials for Zoho CRM

In this guide, I'll walk you through setting up Zoho CRM OAuth2 credentials and configuring the authentication. So, let's begin.

Setting up Zoho CRM

In this section, we'll go through the process of creating a server-based Application and setting up Zoho to access the credentials.

**Note: **If you already have a Server based application in Zoho API Console and can access the Client ID and Client Secret, you can skip to Step 3.

Step 1: Create an Application

Visit the Zoho API Console and create a Server-based Application (since our redirect URI points to a backend endpoint).

A client-based app uses a SPA to perform the application logic directly in the browser, so you will need a JavaScript origin URI to create a Client App. You can learn more about the types of Applications in the Zoho OAuth 2.0 Glossary.

Step 2: Fill Out Application Details

When creating the app, use the following configuration:

Client Name:Test Application
Homepage URL:https://backend.composio.dev
Authorised Redirect URIs:https://backend.composio.dev/api/v1/auth-apps/add

Once you save this configuration, Zoho will generate your Client ID and Client Secret.

Step 3: Configure Scopes

Zoho's Developer Console doesn't let you manually add scopes.
Instead, Composio provides a "Manage Scopes" field where you can define the access level your integration requires. When creating an Auth Config for Zoho in Composio, scroll down to Manage Scopes and add or remove scopes as needed.

You can learn more about OAuth scopes in the Zoho Books API documentation.

By default, Composio pre-enables these scopes for Zoho CRM integrations:

Scope	Description
`ZohoCRM.modules.ALL`	Grants access to all modules and their data in Zoho CRM.
`ZohoCRM.settings.ALL`	Grants access to all settings and configurations in Zoho CRM.
`ZohoCRM.notifications.ALL`	Grants access to all notification settings and data in Zoho CRM.
`ZohoCRM.users.ALL`	Grants access to all user management features in Zoho CRM.

Additional Useful Scopes (Optional)

If you need to extend access, here are some specific Zoho CRM scopes you can safely use:

Scope	Description
`ZohoCRM.contacts.ALL`	Access to all contact management features (leads, accounts, contacts)
`ZohoCRM.deals.ALL`	Access to all deal management and sales pipeline features
`ZohoCRM.tasks.ALL`	Access to all task management and activity tracking features
`ZohoCRM.reports.ALL`	Access to all reporting and analytics features
`ZohoCRM.org.ALL`	Access to organization-level details like company info
`ZohoCRM.bulk.ALL`	Grants permission to use bulk read/write APIs
`ZohoCRM.files.ALL`	Access to attachments and file records within CRM
`ZohoCRM.coql.READ`	Grants permission to perform COQL queries for filtered data access
`ZohoCRM.functions.ALL`	Manage custom functions and workflows within CRM

Step 4: Creating the Auth Config in Composio

Once you have your Client ID and Client Secret from Zoho:

Go to your Composio Dashboard.
Click Create Auth Config → select Zoho CRM from the list.
Ensure the authentication type is OAuth2 (default).
Add your scopes under Manage Scopes, or use the defaults above.
Enable "Use your own developer credentials".
Paste in the Client ID and Client Secret.

Finally, click Create Zoho Auth Config.

Step 5: Using Your Auth Config

Once created, you can find your auth_config_id (starts with ac_) in the Manage Auth Configs tab.
Use this ID in your application or agent to authenticate and interact with Zoho CRM via Composio.

Your Zoho CRM OAuth integration is now fully configured and ready to roll. 🚀