# Sub Accounts Field Guide

## Sub Account Overview

This section provides an introduction to sub accounts and their unique dynamics.

#### <mark style="color:blue;">A sub account is an independent, fully functioning Zoom account that is associated with another Zoom account known as the master account</mark>

A sub account is a separate account environment with standard feature accessibility that is associated with another Zoom account known as the master account. Despite being associated with a master account, sub accounts are best thought of as unique, independent accounts that do not share any intrinsic relationship or settings with any other account. All users, settings, configurations, and account details are, with few exceptions, unique to each sub account.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXdGauFphiHUrauGZePW5G95PoSBEto1ZEH_BSWtTCHkjfC09-nGL7YGl0-QgSC62Rpq787EFe-YaiHtrOEkHqQ-6YaopQhlFVcGbOiEE-XcgrBDP9znOgUSvUMCV_UkqW1rds9Z8a__kd2BGsZxWmiyKKWG?key=6EAi_yWXrsqm3L5Ap8X6yg" alt=""><figcaption><p>Diagram of Master and Sub Account hierarchy.</p></figcaption></figure>

{% hint style="info" %}
**Note**

*Some* accounts, such as those using carrier-provided SIP connected audio plans, or three-tier sub accounts, maintain dependencies on their associated master account for functionality. Apart from these exceptions, accounts maintain independence in configurations and settings.
{% endhint %}

#### <mark style="color:blue;">Companies with subsidiary sub accounts are manageable by an admin or authorized user on the master account</mark>

Although a sub account’s environment is independent of the master account, authorized users on a master account can manage and configure a sub account [through the web portal](#disassociating-a-sub-account). This includes: enabling, disabling, or locking account-wide settings; viewing account reports; adding or removing users; configuring single sign-on; and more.

{% hint style="info" %}
**Note**

Distributor, reseller, and carrier accounts do not have access to this feature by default, but can be enabled on an exception basis. Contact your account executive for more information.
{% endhint %}

#### <mark style="color:blue;">A sub account does not inherit master account configurations</mark>

Because every sub account is a unique environment, settings and configurations on the master account do not automatically apply to sub accounts. Any locked or enforced settings on a master account must be reinforced on the sub account level to apply.

For example, if the master account has all telephony options disabled and locked on the account level, a sub account will not be impacted by this setting, and can enable telephony options for users on the account.

#### <mark style="color:blue;">A sub account can have a unique vanity URL, SSO configuration, and associated domain list</mark>

Because a sub account is a unique, independent account, each sub account can have its own vanity URL, single sign-on (SSO) configuration, and associated domains list. This allows each account more granular control over its configuration, independent of master account configurations.

For example, the University of Zoom is a master account that maintains most of the university’s students and faculty. The faculty and students authenticate through SSO using their generic vanity URL. However, the university wants to create a healthcare account with restrictive settings to respect patient privacy. The University of Zoom can create a University of Zoom – Healthcare sub account with a unique vanity URL and SSO configuration that only healthcare providers use. Additionally, the admin can associate the university’s healthcare subdomain with the account, so all healthcare employees within the university are automatically prompted to consolidate into the healthcare sub account.

#### <mark style="color:blue;">Bulk licensing allows master and pseudo-master accounts to delegate licenses from a master account to one or more sub accounts</mark>

{% hint style="info" %}
**Note**

A pseudo-master account is a sub account that operates as a master to a third-tier sub account. This workflow is unique to specific reseller and carrier accounts.
{% endhint %}

Customers with bulk licensing enabled can delegate licenses from a master account (or pseudo-master) to a sub account at no additional cost.

For example, if a company has 1,000 total meeting licenses and 900 are in use, the remaining 100 can be delegated to any number of sub accounts at no additional cost. The following table provides examples of how a master account can distribute remaining licenses across one or more sub accounts:

| Licenses Purchased by Master | Used on Master Account | Assigned to Sub Account 1 | Assigned to Sub Account 2 | Remaining Assignment |
| ---------------------------- | ---------------------- | ------------------------- | ------------------------- | -------------------- |
| 1000                         | 900                    | 100                       | 0                         | 0                    |
| 1000                         | 900                    | 50                        | 50                        | 0                    |
| 5,000                        | 10                     | 1,000                     | 1,000                     | 2990                 |

{% hint style="info" %}
**Note**

Bulk licensing is not available to all customers. Contact your Zoom account executive for more information on bulk licensing.
{% endhint %}

#### <mark style="color:blue;">Master accounts without bulk licensing can pay for sub accounts directly, or configure separate billing within each sub account</mark>

When creating a sub account without bulk licensing delegation, customers can choose to consolidate the sub account’s billing into the master account, or make the sub account liable for their own expenses.

{% hint style="info" %}
**Note**

Distributor, reseller, and carrier accounts are **always** “pay by master.”
{% endhint %}

## Sub Account Management

This section provides instructions for adding, managing, and configuring sub accounts from a master account. When applicable, instructions are defined by accounts with and without bulk licensing enabled.

#### <mark style="color:blue;">The Sub Accounts page on the web portal contains a Dashboard, Accounts List, and Report center</mark>

An account owner or admin with [sufficient role privileges](https://support.zoom.us/hc/en-us/articles/115001078646-Using-role-management) within the *master* account can access the Sub Accounts management page, available under the **Account Management** menu. This page contains a **Dashboard**, **Accounts List**, and **Report** generator for sub account data, and is the central location for managing all associated sub accounts.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXeSGf__QbAnKf5yyQ7W5NObfrSNfmqEGldQmr2IVUxwBhknhXATxmcG9Srzh1kmtfcL1OWx2bbIdyAWEAcuGbt85MK8bfKC3e99XutXQXBjnGAOnUMAZjc10JK7htr4qphc56uiSFC-K0UocQe80lBSl7W2?key=6EAi_yWXrsqm3L5Ap8X6yg" alt=""><figcaption><p>Location of Sub Account admin menu.</p></figcaption></figure>

{% hint style="info" %}
**Note**

The **Sub Accounts** option is not available for accounts by default. Confirm your role has [sufficient privileges](https://support.zoom.us/hc/en-us/articles/115001078646-Using-role-management) or consult your account executive for more information on enabling sub accounts if this option is not available.
{% endhint %}

#### <mark style="color:blue;">Master accounts with bulk licensing see a comprehensive license summary for</mark> *<mark style="color:blue;">all licenses</mark>* <mark style="color:blue;">in the Sub Accounts Dashboard</mark>

Master accounts with bulk licensing enabled see a comprehensive license summary between all sub accounts and the master account. This summary lists the total of all licenses owned by the master account and specifies how many licenses are distributed across all sub accounts.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXeglOfnsDosmzVJ-Rwu7MEGnMYGI4XdVZJUtmuwgcAuGnALOdnwqcYtVKuqroDUxs7Du5C3hAfBAR_gIrZYVwK3HA6XBP9wtaCnq3d2h9aF_jEHQU_I_eKM9kXkYF11T4rscpYXW8KCIvl3WEHG8DFjVEw?key=6EAi_yWXrsqm3L5Ap8X6yg" alt=""><figcaption><p>Example comprehensive license summary with bulk licensing.</p></figcaption></figure>

#### <mark style="color:blue;">Master accounts</mark> *<mark style="color:blue;">without</mark>* <mark style="color:blue;">bulk licensing see a table with aggregate totals in the Sub Accounts Dashboard</mark>

Master accounts without bulk licensing enabled see an aggregate total of all associated sub accounts, users (hosts), seats purchased (licenses), and conference room connector ports.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXe6-NAXn33YbYo6l7brOacu4jY94tLjGQLf7MQ5jcE2xOggZdvyh_ckOVtvfDnhmVgeGZVOaUL5BKfUtmStgHTtjOmOwVbt5qKBDmNrTH0qW0XO8Yzq8XuVo87rX50ELAVAOHE2tZg3SzcLULcW03ISyAq2?key=6EAi_yWXrsqm3L5Ap8X6yg" alt=""><figcaption><p>Example table without bulk licensing.</p></figcaption></figure>

#### <mark style="color:blue;">The Accounts List is the central location for sub account overviews and plan management</mark>

Viewing the **Accounts List** from the **Sub Accounts** menu displays general sub account information including the account name, owner email, account number, billing type, account type, licenses assigned, subscription dates (if applicable), and account creation time.

From this page, an admin or authorized user can click **View Plan** to edit sub account plan subscriptions or click the **Account Name** to sign into the sub account.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXfGLDGvUriL3dk6vbe5rUO3eQuE-d_vKWbCj7cLNVBzo66Fz4COUrCYvzY0N_S7WvYI_n2iG4FjoRMgke6KfsdfjMWuljM2XqNdUe4PvEeiDr9VFEdrBQhHr6mxk4MmAgjNtOfTrE5UKhcjWfC0YuIFGaS2?key=6EAi_yWXrsqm3L5Ap8X6yg" alt=""><figcaption><p>Example account list.</p></figcaption></figure>

#### <mark style="color:blue;">The Report page can generate a Telephone, Cloud Recording, and Active Host report for selected sub accounts</mark>

An admin or authorized user within the master account can generate a Telephone, Cloud Recording, or Active Host report for any sub accounts associated with the master account. These reports can help determine license utility, telephony overage charges, and cloud recording storage use across accounts.

Refer to our support documentation for more information on [reporting](https://support.zoom.us/hc/en-us/articles/201363213-Getting-started-with-Zoom-reporting).

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXcLepMID_Qbf88SLW11knYXqN8BhVy-bgv2rF5CZIZUe7M6yq9iqGyfgRLvOywe5Qo847Hxhwi2WqxCiQiz8PtJJSb1IvyrCUzWEHt-I4xFw-3vhXuyS3onIp6IOku6lMKn0RnskeUm7d-njQA_L-vmzHuM?key=6EAi_yWXrsqm3L5Ap8X6yg" alt=""><figcaption><p>Example report generation.</p></figcaption></figure>

### Adding a Sub Account

An admin or authorized user on the master account can add a sub account through the [**Accounts List**](https://zoom.us/account/sub/list) page, available within the **Sub Accounts** menu.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXdKe2DSEnii9wop0-8x6iCgGWI9i_nBtFn5QI5q-9xq2kfCtmj1AQiMKO3Po8dHiq6IPUwhIADc-Mg07Pap7HBK-C-tEMw1sxtKL8hDed5NBlBmJ15yaUKymuCExGhiQGMa90-oCpqwGbYuzV1dcY8FxP15?key=6EAi_yWXrsqm3L5Ap8X6yg" alt=""><figcaption><p>How to add a sub account.</p></figcaption></figure>

#### <mark style="color:blue;">Adding a Sub Account With Bulk Licensing</mark>

1. As a Zoom admin or authorized user, navigate to the [**Accounts List**](https://zoom.us/account/sub/list) page within the **Sub Accounts** menu and click **Add** in the top-right corner of the screen
2. Fill in the information for the sub account
   1. Input the **Account Name**
   2. Input the **Account Owner Email** (*must* be valid and never previously registered)
   3. Generate a secure, strong password
   4. Select your sub account payment and collection option
   5. (Optional) Select **Show audio storage cost**, which shows the *rate and total* of charges associated with premium telephony when generating reports
   6. Click **Create and Continue**
3. Assign the licenses you are applying to the sub account

   <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXcd2ObmvyGuvOfRv5JCX6fgzoaxs20wDmomj6N2d-zRE8tbcEcsyLVRl59u8F4w25eTE_FvPArfGAOL7YtluklbjED3NapbWkAXQI1x-QrztFIeNsVORUuz-P2MNq9zH2jeoxSf27l7Bb-mVf5oRDgly60y?key=6EAi_yWXrsqm3L5Ap8X6yg" alt=""><figcaption><p>Example license assignment.</p></figcaption></figure>
4. Click **Assign License** in the bottom left corner to review and **Confirm** your license assignments to create the sub account

   <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXcmCAeWe7lGBTGhm365xnIcS4UQ2nfFn56JFlVjRK7meVO8hxnlyxB0rqnOB5B7Hb6YDZzRrJelykSxDouNNGBYsHRzz8_vUUAEFNklwO2dUrlhEAZYYhks6yd41RfU-qyLS7pD6ltPIUF7gL73H7uX-vDE?key=6EAi_yWXrsqm3L5Ap8X6yg" alt=""><figcaption><p>Example confirmation screen.</p></figcaption></figure>

#### <mark style="color:blue;">Adding a Sub Account Without Bulk Licensing</mark>

1. As a Zoom admin or authorized user, navigate to the [**Accounts List**](https://zoom.us/account/sub/list) page within the **Sub Accounts** menu and click **Add** in the top-right corner of the screen
2. Fill in the information for the sub account
   1. Input the **Account Name**
   2. Input the **Account Owner Email** (*must* be valid and never previously registered)
   3. Generate a secure, strong password
   4. Select your sub account payment and collection option
   5. (Optional) Select **Show audio storage cost**, which shows the *rate and total* of charges associated with premium telephony when generating reports
   6. Click **Create and Continue**
3. Select the **Plan Type** for the sub account, select the license count, and select any add-ons

   <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXfwwopcg1LlvgMOzp3-aGZ8S8nsQpmE6WbLS5HIsl114a_L5s76wI1mLj9xKb1zyWfOx5Y204NDS7JX7ZXqsVjeBLyrdf5wNbLzPWMdBwmNU51HXJogVhudjWmP1s0lFH4Oq6kIUnDokgd2-xNCzKThCOJF?key=6EAi_yWXrsqm3L5Ap8X6yg" alt=""><figcaption><p>Example plan type with total.</p></figcaption></figure>
4. Click **Continue** to finish

### Managing Sub Account Plans and Licenses

An admin or authorized user on the master account can manage sub account plans or licenses through the [**Accounts List**](https://zoom.us/account/sub/list) page by clicking **View Plan** to the right of the account.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXdpOk78xzXaw5o6ZU_kX8FD3Rs_K5roJR912OlOk_aY5SPidqsIa5jFQoshi2UCTOqIDgG4-nOd1o3_fMIJzDYxFffrqu5GcZQ8Ufa4TO7QO5U9YEfBtsW1hfhkbCPc7rl2Qy7PesBHqYBXvg8ugs4mCVYH?key=6EAi_yWXrsqm3L5Ap8X6yg" alt=""><figcaption><p>Example account list.</p></figcaption></figure>

#### <mark style="color:blue;">Updating a Sub Account Plan and Licenses With Bulk Licensing</mark>

1. Navigate to the [**Accounts List**](https://zoom.us/account/sub/list) page
2. Click **View Plan** for the account you are modifying
3. Click **Edit Subscriptions** in the bottom left corner

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXcu_iODSGtyQF64zH_ZY0kytjX21HMbxHVOaUH7pUHdqCO0WeWf5krSwAGaO7_80tvH0QJDBHmGcgpKWbtJ3QS_5fl9uZrTlOb9UqhBcud_5jxks4KRjsm2QfE6M71533Rv5ajDQVFNv25iY7w9_KLK4iY?key=6EAi_yWXrsqm3L5Ap8X6yg" alt=""><figcaption><p>Edit Subscription button location.</p></figcaption></figure>

4. Update the license values and click **Assign License** to **Confirm** the new assignments

#### <mark style="color:blue;">Updating a Sub Account Plan and Licenses Without Bulk Licensing</mark>

To update a sub account’s license assignment without bulk licensing enabled:

1. Navigate to the [**Accounts List**](https://zoom.us/account/sub/list) page
2. Click **View Plan** for the account you are modifying
3. Click **Add/Edit** on the right side

   <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXdVb7VfVULWSpvNiOq2zSVDPiKXmqCWsrv52xGgYAgHv3PzWl7OflPwYBVESzgLWsWKAuMuxodP7T--7bSF5rQu7aN_1-ERKF5muQGdp0QmVuFLijlglCmNECahuEZC-4kptJVViCqNasud2Dd-_EFJkJ02?key=6EAi_yWXrsqm3L5Ap8X6yg" alt=""><figcaption><p>Location of Add/Edit in menu.</p></figcaption></figure>
4. Update the plan values as necessary and click **Continue** to finalize changes

#### <mark style="color:blue;">Disassociating a Sub Account</mark>

A master account can disassociate a sub account by clicking the **Disassociate** button on the **View Plan** page. This will not delete the sub account, but will instead grant full autonomy and independence from the master account. Any disassociated sub accounts will retain all users, settings, and configurations set at the time of disassociation.

{% hint style="danger" %}
**Warning**

Carrier partner phone numbers assigned to a sub account for SIP connected audio (SCA) will remain available if they are not removed prior to disassociation. Carrier partners are encouraged to remove SCA phone numbers from a sub account before disassociating.
{% endhint %}

To delete a sub account, refer to our [support documentation](https://support.zoom.us/hc/en-us/articles/201363243-Deleting-or-terminating-your-account).

### Signing into a Sub Account as an Administrator

There are two methods for signing into a sub account as an administrator:

1. A Zoom admin or authorized user on the master account can **manage a sub account** from the **Account Details** page, accessible via the [**Accounts List**](https://zoom.us/account/sub/list)
2. Authenticate directly using the sub account owner or zoom admin credentials

Once authenticated within the sub account through either method, an admin can manage the account as normal.

#### <mark style="color:blue;">Manage a Sub Account from the Master Account</mark>

To sign into a sub account from the master account, perform the following steps:

1. Navigate to the [**Accounts List**](https://zoom.us/account/sub/list) page within the **Sub Accounts** menu
2. Click the **Account Name** in the left column\\

   <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXf2o8xRvLRyG-m1dn6xPcOUB8CRa9HzfyQp7CYAfa5En_2J2BUpQy6dTP-GJBiRmBeoaZc3nHeOe_tvZAitoGq55UzHtjEatscdsCvbcReAwyrl0cNiHBmfSzZpGCpOux4UMiz7JFI8id-h_mJw6eYL5Nc?key=6EAi_yWXrsqm3L5Ap8X6yg" alt=""><figcaption><p>Example account name.</p></figcaption></figure>
3. Scroll down and click **Manage this Account**

   <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXcXhtJsflQkCnGSJjt3nnyll4JasmQJ02yNhIA7oCB5eDV3ur5dFJMldfRAf8i48PSNfg7AXf_zRWpQFN1JBQBufIWUTJ194uxXLKyzG382Sc9SCEZhLlAYHN4eZr7xYUpiCkqC5d9uM0h9LeOad007GO9f?key=6EAi_yWXrsqm3L5Ap8X6yg" alt=""><figcaption><p>Example Manage this Account button location.</p></figcaption></figure>
4. You are now signed into the sub account as the sub account owner

   <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXdh6c-JuGLEPiIf5A9DrurHHBMh-d2efM2grQxjL68FwgVQ4M1St4TIXW7vITs6jzjIzxzybH9lUrM6l9nDz5fEFR650kD6iXviD4_VudOxZ2hXIUzrT5aIH7854wjTRY6mFwnLoo3LW485f0q8EZm2a-Gr?key=6EAi_yWXrsqm3L5Ap8X6yg" alt=""><figcaption><p>Example page after signing in as sub account.</p></figcaption></figure>
5. Return to the master account at any time by clicking Back to Master Account in the top left corner

{% hint style="info" %}
**Note**

When managing a sub account through this method, the Personal sub-menu interface for scheduling meetings, updating profile information, or changing user settings is unavailable; only the Admin sub-menu interface will display.
{% endhint %}

#### <mark style="color:blue;">Authenticate Directly as a Sub Account Owner or Admin</mark>

To sign into a sub account directly using owner or admin credentials:

1. Navigate to the [zoom.us sign-in page](https://zoom.us/signin) or the sub account’s vanity URL if using SSO
2. Enter credentials or click “**Sign In**” if using SSO from the vanity URL
3. Complete authentication

### Establishing a Vanity URL for a Sub Account

Sub accounts applying for a vanity URL should choose a name in accordance with [Zoom guidelines](https://support.zoom.us/hc/en-us/articles/215062646-Guidelines-for-Vanity-URL-requests), or as a modified version of the master account’s vanity URL. This process can be initiated from the [**Account Profile**](https://zoom.us/account) page under the **Account Management** menu in the web portal.

For example, if a Zoom reseller sells a sub account to company.com, the vanity URL application should be company.zoom.us. If the company’s domain is company.io, the application should be company-io.zoom.us. Alternatively, if the sub account is a testing account for the master, the application should be company-testing.zoom.us, or similar.

### Configuring Single Sign-On with a Sub Account

There are two standard configurations for integrating single sign-on (SSO) with sub accounts:

1. Authenticate through the master account’s vanity URL and be placed in the sub account through SAML response mapping
2. Configure a separate vanity URL and SSO configuration unique to the sub account

Both configurations offer unique advantages depending on user management requirements. The following two sections examine the details of both configuration options.

#### <mark style="color:blue;">Users can be mapped from a master account to a sub account through SAML response mapping with a meeting license and add-ons</mark>

Users that authenticate through a master account’s vanity URL can be mapped to a sub account through SAML response mapping under the [**SAML Advanced Information Mapping**](https://zoom.us/account/sso/mapping) section. Users that are mapped to the sub account through this method can only receive a meeting license and meeting add-ons through response mapping within the sub account. Any additional configurations such as Zoom Phone, User Group, or User Role, etc., must be manually performed within the sub account to apply.

This configuration is ideal for sub accounts that are highly defined in purpose and do not require advanced configurations or user assignments within the sub account. Accounts that require advanced user configurations or assignments within the sub account should not use this method. For more information, refer to the section on [mapping users to a sub account](#filter-users-into-the-sub-account-through-saml-response-mapping-from-the-master-account).

#### <mark style="color:blue;">Sub accounts can have a separate, unique single sign-on configuration for complete SAML response mapping options</mark>

Any business or enterprise-level sub account can have a unique vanity URL and single sign-on configuration. This configuration is recommended for sub accounts that require advanced SAML mapping configurations, including user groups, user roles, cloud recording storage locations, and more.

### Adding Users to a Sub Account

Zoom admins can add users to a sub account through the following methods:

1. Invite users directly
2. Use the Associated Domains feature
3. Filter users into the account through SAML response mapping
4. SSO just-in-time provisioning or pre-provisioning within the sub account
5. Submit a ticket to Zoom Support for user migration between associated accounts

#### <mark style="color:blue;">Invite Users Directly</mark>

To directly invite a user to join a sub account:

1. Sign into the sub account [through the master account](https://docs.google.com/document/d/1F3gT4i7_hhaiNFvhB6RHQEktoW7DFbYw7DhnDHzvP9I/edit#heading=h.byot4zluuc1w) or directly
2. Click **User Management** within the **Account Management** menu
3. Import users in a list via CSV or click +Add Users to manually enter the email address

{% hint style="info" %}
**Note**

To sign into a sub account directly using owner or admin credentials:

1. Navigate to the [zoom.us sign-in page](https://zoom.us/signin) or the sub account’s vanity URL if using SSO
2. Enter credentials or click “Sign In” if using SSO from the vanity URL
3. Complete authentication
   {% endhint %}

Refer to our support documentation on [adding users to an account](https://support.zoom.us/hc/en-us/articles/201363183-Managing-users#h_8b193526-997c-4385-955b-ffddda0b0404) for more information.

#### <mark style="color:blue;">Associated Domains</mark>

Zoom account admins can automatically consolidate users into an account over time through the associated domains feature, depending on the configuration.

Refer to our support documentation on [associated domains](https://support.zoom.us/hc/en-us/articles/203395207-Getting-started-with-associated-domains) for more information.

#### <mark style="color:blue;">Filter users into the sub account through SAML response mapping from the master account</mark>

Accounts that do not want to establish a separate vanity URL or SSO configuration can filter users from the master account to a sub account through SAML response mapping. Users that are added to a sub account through this method will only receive a license and any applicable add-ons if they pass SAML values for **all configurations** related to licensing, add-ons, and sub-account mapping within the master account.

To configure:

1. Sign in to the master account using an admin or authorized user account
2. Navigate to the [**SAML response mapping**](https://zoom.us/account/sso/mapping) page within your account’s **Single Sign-On** configuration under **Advanced** settings
3. Locate the **SAML Advanced Information Mapping** section
4. Configure the appropriate SAML attribute and value mapping for the designated sub account, and licenses if applicable\\

   <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXf3kRT7-Nf4EMOGMQV73BzmN3dXRrm4xnTMBO57taWH_hWo03qoWqujph8t9aMlHwyYC33-aT8da9hnV6PCa-bx9EoxF2zf2Fg4eFjzue1WJVZvtGjh1FUK0azQjlwIn1gvW0esspEEILLKYJa3RGOBNKJK?key=6EAi_yWXrsqm3L5Ap8X6yg" alt=""><figcaption><p>Example SAML advanced information mapping.</p></figcaption></figure>

{% hint style="info" %}
**Note**

In the above image, a user must assert the SAML values of **global\_users** and **HIPAA**, **Developer**, or **Tester** to receive licenses, add-ons, and be filtered into the sub account. No additional SAML response mappings will apply regardless of matching responses.
{% endhint %}

5. After the user authenticates from the master account vanity URL, if all SAML response values match, the user will be placed within the sub account

#### <mark style="color:blue;">Provision just-in-time or pre-provision users with a standard SSO configuration within the sub account</mark>

Business-level and higher sub accounts can utilize a standard SSO configuration within the account for just-in-time provisioning or pre-provisioning for user accounts. This configuration will have no impact on other sub accounts or the master account and requires a vanity URL associated with the sub account.

For convenience, the following identity provider integration instructions are available:

{% hint style="success" %}
**Zoom Tip**

Click the ✔ in the Provider or Zoom Documentation column to open a new window to instructions.
{% endhint %}

| <p><br></p>   | Provider Documentation                                                                                         | Zoom Documentation                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| ------------- | -------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| auth0         | [✔](https://marketplace.auth0.com/integrations/zoom-sso)                                                       | <p><br></p>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| Azure         | [✔](https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/zoom-tutorial)                           | [✔](https://support.zoom.us/hc/en-us/articles/115005887566-Configuring-Zoom-with-Azure)                                                                                                                                                                                                                                                                                                                                                                                                      |
| ADFS          | <p><br></p>                                                                                                    | [✔](https://support.zoom.us/hc/en-us/search/click?data=BAh7DjoHaWRpBI%2F8Dww6D2FjY291bnRfaWRpAxQqAjoJdHlwZUkiDGFydGljbGUGOgZFVDoIdXJsSSJXaHR0cHM6Ly9zdXBwb3J0Lnpvb20udXMvaGMvZW4tdXMvYXJ0aWNsZXMvMjAyMzc0Mjg3LUNvbmZpZ3VyaW5nLVpvb20tU1NPLXdpdGgtQURGUwY7CFQ6DnNlYXJjaF9pZEkiKTVlZWY5ZWQ2LTJjNWItNDRhMS1hYzdhLTQ3ODc2ZmZjYTM2YgY7CEY6CXJhbmtpBzoLbG9jYWxlSSIKZW4tdXMGOwhUOgpxdWVyeUkiCFNTTwY7CFQ6EnJlc3VsdHNfY291bnRpcQ%3D%3D--06df9ad44c3254348746ce701bdf45cdf6fd36db)                     |
| Clever        | [✔](https://support.clever.com/hc/s/articles/360040481852)                                                     | <p><br></p>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| CyberArk      | [✔](https://docs.cyberark.com/Product-Doc/OnlineHelp/Idaptive/Latest/en/Content/Applications/AppsWeb/Zoom.htm) | <p><br></p>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| Duo           | [✔](https://duo.com/docs/sso-zoom)                                                                             | <p><br></p>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| JumpCloud     | [✔](https://support.jumpcloud.com/support/s/article/single-sign-on-sso-with-zoom1-2019-08-21-10-36-47)         | <p><br></p>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| miniOrange    | [✔](https://www.miniorange.com/zoom-us-saml-single-sign-on-solution)                                           | <p><br></p>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| Okta          | [✔](https://saml-doc.okta.com/SAML_Docs/How-to-Configure-SAML-2.0-for-Zoom.us.html)                            | [✔](https://support.zoom.us/hc/en-us/search/click?data=BAh7DjoHaWRsKwiKBeDGGgA6D2FjY291bnRfaWRpAxQqAjoJdHlwZUkiDGFydGljbGUGOgZFVDoIdXJsSSJYaHR0cHM6Ly9zdXBwb3J0Lnpvb20udXMvaGMvZW4tdXMvYXJ0aWNsZXMvMTE1MDA1NzE5OTQ2LU9rdGEtY29uZmlndXJhdGlvbi13aXRoLVpvb20GOwhUOg5zZWFyY2hfaWRJIikxZmJjMjhhNC03OTM1LTRmOGYtOTllMi02YTBiYTgwNzk0NTYGOwhGOglyYW5raQw6C2xvY2FsZUkiCmVuLXVzBjsIVDoKcXVlcnlJIhVjb25maWd1cmluZyB6b29tBjsIVDoScmVzdWx0c19jb3VudGkC6AM%3D--97242e750cce02ed61dfa39c762dcb565fb71ea6) |
| OneLogin      | [✔](https://www.onelogin.com/connector/zoom)                                                                   | [✔](https://support.zoom.us/hc/en-us/articles/204752775-Configuring-Zoom-with-OneLogin)                                                                                                                                                                                                                                                                                                                                                                                                      |
| Ping Identity | [✔](https://docs.pingidentity.com/bundle/pingfederate-zoom-connector/page/ejj1584646507320.html)               | <p><br></p>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| Shibboleth    | <p><br></p>                                                                                                    | [✔](https://support.zoom.us/hc/en-us/search?utf8=%E2%9C%93\&query=configuring+zoom)                                                                                                                                                                                                                                                                                                                                                                                                          |

#### <mark style="color:blue;">Submit a ticket to Zoom Support for user migration between associated accounts</mark>

Zoom Support can bulk migrate users from one account to another [through a support ticket](https://support.zoom.us/hc/en-us/requests/new). This can alleviate the need to manually invite users if migrating a large subset from a master account to a sub account, or from one sub account to another.

Zoom Support **will not** forcibly migrate users from external or unassociated accounts to a master or sub account. Users **must** be managed by or associated with the master account via a sub account to be migrated. Individual, external users with pre-existing accounts must be invited to join the account through a standard process to consolidate.

For example, a master account is creating a new healthcare sub account with a unique vanity URL and SSO configuration. A Zoom admin can submit a ticket to Zoom Support with a CSV file containing a list of user emails to migrate from the master account to the sub account. Because these emails are existing members of the master account, Zoom Support can migrate the users.

However, if this list contains users that are not a member of an existing, associated sub account or the master account, those users cannot be migrated and must be invited through standard procedures, such as a manual invite.

Requests to migrate users should be submitted with:

* Tentative date and time for the requested migration (best effort)
* A CSV file of all user emails to be migrated in a single column
* The specific account number the users are being migrated *from* and *to*
* Master account owner or admin approval

### Additional Account Management

Additional sub account management workflows match their master or “standard” account counterparts. Any additional configurations required within a sub account should be performed the same as they otherwise would be, with additional topics and instructions available in the [Zoom Support Center](https://support.zoom.us/hc/en-us).


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://library.zoom.com/admin-corner/account-and-endpoint-management/sub-accounts-field-guide.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.