Integrate iPaaS.com with Zoho Commerce to enable seamless data synchronization for product categories, products, product variants and inventory levels sent out to the store, and for sales orders — with their line items, billing and shipping addresses, taxes, payments and header discounts — captured back into iPaaS.com.
This article is the ongoing reference for a Zoho Commerce subscription: what each setting does, where its value comes from, and how the connection is authorized and maintained. If you are setting a subscription up for the first time, follow the Zoho Commerce Installation Instructions article and use this article afterwards for reference, credential rotation and environment changes.
How to Connect
Prerequisites
Complete the following in Zoho Commerce before configuring the subscription in iPaaS.com.
A Zoho Commerce account with Administrator privileges: the Zoho user who authorizes the connection must be able to read and write products, categories, inventory adjustments, sales orders and store settings. A user without an administrator role can complete the authorization screen and still be refused access to store data afterwards.
A store hosted on the United States Zoho data center: the integration authenticates against the United States Zoho accounts domain only. A store whose Zoho organization lives on a regional data center — for example the European, Indian, Australian, Japanese or Canadian domain — cannot be connected with this integration at the time this documentation was written. Confirm which data center holds your organization before you begin.
An OAuth client registered in the Zoho API Console: create a Server-based Application at https://api-console.zoho.com and record the Client ID and Client Secret it generates. The Authorized Redirect URI on that client must be exactly
https://portal.ipaas.com/customer/subscription-mgmt/subscriptions/authorization/app, or the authorization round trip will not return to iPaaS.com.Your Zoho Commerce Organization ID: Zoho Commerce refers to each business as an organization, and every request the integration makes identifies the organization it is acting on. Retrieve the value from your Zoho Commerce account in either of two ways: open the Zoho Commerce admin pages in a browser and read the store's organization variable from the browser's developer console, or call the Zoho Commerce organizations endpoint, which returns the organization identifier in its response. If neither method produces a value you can use, contact Zoho Commerce support. If your Zoho account holds more than one organization, use the one that owns the store you are integrating.
Subscribers cannot supply the additional OAuth 2.0 configuration on the iPaaS.com side themselves. Subscribers or their MiSP (Managed Integration Service Provider) should plan for the MiSP or implementation partner to complete that part of the setup.
Configuration Details
Each value below is entered on the Zoho Commerce Subscription Settings page in iPaaS.com.
API Url: the base address of the Zoho Commerce store API. Enter
https://commerce.zoho.com/store/api. The integration does not ship a separate test or sandbox address, so this value is the same for every subscription. Example:https://commerce.zoho.com/store/apiClient_Id: the public identifier of the OAuth client you created in the Zoho API Console, found on that client's Client Secret tab. Example:
1000.ABCDE12345FGHIJ67890KLMNO12345Client_Secret: the confidential credential issued alongside the Client ID on the same tab. Treat it like a password — do not share it, and do not paste it into screenshots or support tickets. Example:
9f8e7d6c5b4a39281706fedcba9876543210abcdOrganization_Id: the identifier of the Zoho Commerce organization that owns the store. Example:
812345678
Configure Subscription Settings
Open Subscriptions, select the Zoho Commerce subscription, and enter the values on the Subscription Settings page. Field labels are displayed in uppercase on the page.
Field | Description | Required | Example |
Name | A unique name for this Zoho Commerce subscription within your company. | Yes | Zoho Commerce - Production |
Versions | The integration version the subscription runs. | n/a — set when the subscription is created | v1.0.0 |
Create Default Mappings | When selected, the delivered mapping collections are created for you; when cleared, every mapping must be built from scratch. | n/a — set when the subscription is created | Selected |
API Url | The base address of the Zoho Commerce store API. | Yes | |
Client_Id | The OAuth client identifier issued by the Zoho API Console. | Yes | 1000.ABCDE12345FGHIJ67890KLMNO12345 |
Client_Secret | The OAuth client secret issued by the Zoho API Console. | Yes | 9f8e7d6c5b4a39281706fedcba9876543210abcd |
Organization_Id | The Zoho Commerce organization that owns the store. | Conditional: the page does not mark this field as required, but the integration includes the organization on every request it sends to Zoho Commerce. Leave it empty and the store cannot tell which organization the request is for, so no record transfers in either direction. Treat it as required. | 812345678 |
API Throttle Limit | The maximum number of calls the subscription makes to Zoho Commerce within the throttle window. Pre-populated by the integration settings. | Yes | 500 |
API Throttle Seconds | The length of the throttle window, in seconds, for calls to Zoho Commerce. Pre-populated by the integration settings. | Yes | 60 |
API Throttle Limit (To iPaaS) | The maximum number of calls made to iPaaS.com within the throttle window. Pre-populated by the integration settings. | Yes | 500 |
API Throttle Seconds (To iPaaS) | The length of the throttle window, in seconds, for calls to iPaaS.com. Pre-populated by the integration settings. | Yes | 60 |
Concurrent Connections | The number of connections the subscription opens at the same time. Pre-populated by the integration settings. | Yes | 10 |
Concurrent Batch Executions | A subscription-level batch value that is pre-populated by the integration settings. Leave it at the delivered value unless iPaaS.com Support at support@ipaas.com or your MiSP advises otherwise. | Yes | 10 |
Organization_Id is optional on the page and required in practice. Nothing in iPaaS.com or Zoho Commerce warns you when it is missing — transfers simply fail to produce records. If a newly configured subscription moves no data at all, this is the first field to check.
The throttling and concurrency values are pre-populated when the subscription is created and can differ between subscriptions. See Throttling below before changing any of them.
Authentication Methods
Zoho Commerce uses OAuth 2.0. iPaaS.com drives the authorization code exchange on your behalf and stores the resulting tokens against the subscription — you never construct a token request yourself, and no API key or password is involved.
Step 1 — register the OAuth client in Zoho. In the Zoho API Console at https://api-console.zoho.com, select Add Client, choose Server-based Applications, and create the client with the iPaaS.com production redirect URI https://portal.ipaas.com/customer/subscription-mgmt/subscriptions/authorization/app. Zoho issues a Client ID and Client Secret on the client's Client Secret tab.
Step 2 — enter the credentials in iPaaS.com. On the Zoho Commerce Subscription Settings page, enter API Url, Client_Id, Client_Secret and Organization_Id, then click Apply.
Step 3 — authorize the connection. Click the Authenticate icon in the toolbar at the top of the Subscription Settings page.
A Zoho authorization window opens listing the permissions iPaaS.com is requesting for your store. Review them, tick I allow iPaas to access the above data from my Zoho account, then click Accept. The Accept button stays disabled until that box is ticked.
Step 4 — confirm the tokens were stored. Close the confirmation window, return to iPaaS.com, and refresh the Subscription Settings page. When authorization succeeded, an AccessToken and a RefreshToken value appear in the stored-settings area below the credential fields. If they are empty, the authorization did not complete — re-check Client_Id, Client_Secret and the redirect URI on the Zoho client, then repeat step 3.
How the tokens are maintained. iPaaS.com stores the access token with its expiry and the refresh token alongside it. When the stored access token expires, the integration exchanges the refresh token for a new one automatically the next time it needs to call the store; the refresh token itself does not expire on a schedule. Two consequences are worth knowing:
Re-authorizing replaces the stored tokens: if you rotate the Client Secret in the Zoho API Console, update Client_Secret in the subscription and run the authorization again. The old tokens stop working as soon as the Zoho client credential changes.
Zoho retains a limited number of refresh tokens per user: authorizing repeatedly from the same Zoho user account eventually causes the oldest tokens to be discarded, which can silently break an older subscription that shares the same Zoho user. Use a dedicated Zoho user for the integration where possible. (Zoho Commerce API documentation, retrieved 22 July 2026: https://www.zoho.com/commerce/api/oauth.html.)
The subscription's connection test does not verify your credentials. At the time this documentation was written, the connection check reports success without contacting Zoho Commerce, so a green result does not prove the credentials, the Organization ID or the API address are correct. Confirm the connection by transferring a real record instead — see the Post-Installation Verification section of the Zoho Commerce Installation Instructions article. Errors from a genuine transfer attempt are reported under Dashboard / Integration Monitoring / Error Logs.
Initialization Support
Currently, initialization is not supported for Zoho Commerce in iPaaS.com. All data synchronization and mappings must be configured manually during the integration process.
There is no bulk first-load of an existing catalog or order history. To move a large existing data set, use the bulk sync using Postman pattern, which drives the same per-record transfers the integration already supports.
Throttling
Throttling limits how quickly the subscription calls Zoho Commerce, so a large transfer does not overwhelm the store API or trigger rate-limit rejections. The same controls exist in the opposite direction for calls made to iPaaS.com.
While the throttling fields are required, the values are pre-populated by the integration settings and do not normally need to be changed. Reduce API Throttle Limit or increase API Throttle Seconds if you begin seeing rate-limit errors under Dashboard / Integration Monitoring / Error Logs; Concurrent Connections controls how much work the subscription runs at once and should only be changed on advice from iPaaS.com Support at support@ipaas.com or your MiSP.
Zoho does not publish a call quota for the Zoho Commerce store API, and a store may still refuse calls made too quickly, so there is no target figure to tune towards. Stagger large catalog or inventory runs rather than sending everything at once, and validate throughput in a staging environment before relying on it in production.
For field-by-field guidance on these controls, refer to Subscription Configuration – Edit.





