Skip to main content

Zoho Commerce Connections and Settings

Integrate iPaaS with Zoho Commerce for seamless data exchange and synchronization.

Integrate iPaaS.com with Zoho Commerce to enable seamless data synchronization for product categories, products, product variants and inventory levels sent out to the store, and for sales orders — with their line items, billing and shipping addresses, taxes, payments and header discounts — captured back into iPaaS.com.

This article is the ongoing reference for a Zoho Commerce subscription: what each setting does, where its value comes from, and how the connection is authorized and maintained. If you are setting a subscription up for the first time, follow the Zoho Commerce Installation Instructions article and use this article afterwards for reference, credential rotation and environment changes.

How to Connect

Prerequisites

Complete the following in Zoho Commerce before configuring the subscription in iPaaS.com.

  • A Zoho Commerce account with Administrator privileges: the Zoho user who authorizes the connection must be able to read and write products, categories, inventory adjustments, sales orders and store settings. A user without an administrator role can complete the authorization screen and still be refused access to store data afterwards.

  • A store hosted on the United States Zoho data center: the integration authenticates against the United States Zoho accounts domain only. A store whose Zoho organization lives on a regional data center — for example the European, Indian, Australian, Japanese or Canadian domain — cannot be connected with this integration at the time this documentation was written. Confirm which data center holds your organization before you begin.

  • An OAuth client registered in the Zoho API Console: create a Server-based Application at https://api-console.zoho.com and record the Client ID and Client Secret it generates. The Authorized Redirect URI on that client must be exactly https://portal.ipaas.com/customer/subscription-mgmt/subscriptions/authorization/app, or the authorization round trip will not return to iPaaS.com.

  • Your Zoho Commerce Organization ID: Zoho Commerce refers to each business as an organization, and every request the integration makes identifies the organization it is acting on. Retrieve the value from your Zoho Commerce account in either of two ways: open the Zoho Commerce admin pages in a browser and read the store's organization variable from the browser's developer console, or call the Zoho Commerce organizations endpoint, which returns the organization identifier in its response. If neither method produces a value you can use, contact Zoho Commerce support. If your Zoho account holds more than one organization, use the one that owns the store you are integrating.

The Zoho API Console Create New Client screen with the client type set to Server-based Applications, the client name and homepage URL filled in, the iPaaS.com production redirect URI entered, and the Create button highlighted

Subscribers cannot supply the additional OAuth 2.0 configuration on the iPaaS.com side themselves. Subscribers or their MiSP (Managed Integration Service Provider) should plan for the MiSP or implementation partner to complete that part of the setup.

Configuration Details

Each value below is entered on the Zoho Commerce Subscription Settings page in iPaaS.com.

  • API Url: the base address of the Zoho Commerce store API. Enter https://commerce.zoho.com/store/api. The integration does not ship a separate test or sandbox address, so this value is the same for every subscription. Example: https://commerce.zoho.com/store/api

  • Client_Id: the public identifier of the OAuth client you created in the Zoho API Console, found on that client's Client Secret tab. Example: 1000.ABCDE12345FGHIJ67890KLMNO12345

  • Client_Secret: the confidential credential issued alongside the Client ID on the same tab. Treat it like a password — do not share it, and do not paste it into screenshots or support tickets. Example: 9f8e7d6c5b4a39281706fedcba9876543210abcd

  • Organization_Id: the identifier of the Zoho Commerce organization that owns the store. Example: 812345678

The Zoho API Console Client Secret tab for a registered client, showing the Client ID and Client Secret fields with copy buttons beside them

Configure Subscription Settings

Open Subscriptions, select the Zoho Commerce subscription, and enter the values on the Subscription Settings page. Field labels are displayed in uppercase on the page.

The iPaaS.com Subscription Settings page for Zoho Commerce, showing the Name, Versions and Create Default Mappings controls, the Organization_Id, Client_Secret, Client_Id and API Url credential fields, and the throttling and concurrency fields below them

Field

Description

Required

Example

Name

A unique name for this Zoho Commerce subscription within your company.

Yes

Zoho Commerce - Production

Versions

The integration version the subscription runs.

n/a — set when the subscription is created

v1.0.0

Create Default Mappings

When selected, the delivered mapping collections are created for you; when cleared, every mapping must be built from scratch.

n/a — set when the subscription is created

Selected

API Url

The base address of the Zoho Commerce store API.

Yes

Client_Id

The OAuth client identifier issued by the Zoho API Console.

Yes

1000.ABCDE12345FGHIJ67890KLMNO12345

Client_Secret

The OAuth client secret issued by the Zoho API Console.

Yes

9f8e7d6c5b4a39281706fedcba9876543210abcd

Organization_Id

The Zoho Commerce organization that owns the store.

Conditional: the page does not mark this field as required, but the integration includes the organization on every request it sends to Zoho Commerce. Leave it empty and the store cannot tell which organization the request is for, so no record transfers in either direction. Treat it as required.

812345678

API Throttle Limit

The maximum number of calls the subscription makes to Zoho Commerce within the throttle window. Pre-populated by the integration settings.

Yes

500

API Throttle Seconds

The length of the throttle window, in seconds, for calls to Zoho Commerce. Pre-populated by the integration settings.

Yes

60

API Throttle Limit (To iPaaS)

The maximum number of calls made to iPaaS.com within the throttle window. Pre-populated by the integration settings.

Yes

500

API Throttle Seconds (To iPaaS)

The length of the throttle window, in seconds, for calls to iPaaS.com. Pre-populated by the integration settings.

Yes

60

Concurrent Connections

The number of connections the subscription opens at the same time. Pre-populated by the integration settings.

Yes

10

Concurrent Batch Executions

A subscription-level batch value that is pre-populated by the integration settings. Leave it at the delivered value unless iPaaS.com Support at support@ipaas.com or your MiSP advises otherwise.

Yes

10

Organization_Id is optional on the page and required in practice. Nothing in iPaaS.com or Zoho Commerce warns you when it is missing — transfers simply fail to produce records. If a newly configured subscription moves no data at all, this is the first field to check.

The throttling and concurrency values are pre-populated when the subscription is created and can differ between subscriptions. See Throttling below before changing any of them.

Authentication Methods

Zoho Commerce uses OAuth 2.0. iPaaS.com drives the authorization code exchange on your behalf and stores the resulting tokens against the subscription — you never construct a token request yourself, and no API key or password is involved.

Step 1 — register the OAuth client in Zoho. In the Zoho API Console at https://api-console.zoho.com, select Add Client, choose Server-based Applications, and create the client with the iPaaS.com production redirect URI https://portal.ipaas.com/customer/subscription-mgmt/subscriptions/authorization/app. Zoho issues a Client ID and Client Secret on the client's Client Secret tab.

Step 2 — enter the credentials in iPaaS.com. On the Zoho Commerce Subscription Settings page, enter API Url, Client_Id, Client_Secret and Organization_Id, then click Apply.

Step 3 — authorize the connection. Click the Authenticate icon in the toolbar at the top of the Subscription Settings page.

The iPaaS.com Subscription Settings page with the Authenticate icon highlighted in the toolbar above the settings panel

A Zoho authorization window opens listing the permissions iPaaS.com is requesting for your store. Review them, tick I allow iPaas to access the above data from my Zoho account, then click Accept. The Accept button stays disabled until that box is ticked.

The Zoho authorization screen listing the permissions requested by iPaaS.com, with the consent checkbox above the Accept and Reject buttons

Step 4 — confirm the tokens were stored. Close the confirmation window, return to iPaaS.com, and refresh the Subscription Settings page. When authorization succeeded, an AccessToken and a RefreshToken value appear in the stored-settings area below the credential fields. If they are empty, the authorization did not complete — re-check Client_Id, Client_Secret and the redirect URI on the Zoho client, then repeat step 3.

How the tokens are maintained. iPaaS.com stores the access token with its expiry and the refresh token alongside it. When the stored access token expires, the integration exchanges the refresh token for a new one automatically the next time it needs to call the store; the refresh token itself does not expire on a schedule. Two consequences are worth knowing:

  • Re-authorizing replaces the stored tokens: if you rotate the Client Secret in the Zoho API Console, update Client_Secret in the subscription and run the authorization again. The old tokens stop working as soon as the Zoho client credential changes.

  • Zoho retains a limited number of refresh tokens per user: authorizing repeatedly from the same Zoho user account eventually causes the oldest tokens to be discarded, which can silently break an older subscription that shares the same Zoho user. Use a dedicated Zoho user for the integration where possible. (Zoho Commerce API documentation, retrieved 22 July 2026: https://www.zoho.com/commerce/api/oauth.html.)

The subscription's connection test does not verify your credentials. At the time this documentation was written, the connection check reports success without contacting Zoho Commerce, so a green result does not prove the credentials, the Organization ID or the API address are correct. Confirm the connection by transferring a real record instead — see the Post-Installation Verification section of the Zoho Commerce Installation Instructions article. Errors from a genuine transfer attempt are reported under Dashboard / Integration Monitoring / Error Logs.

Initialization Support

Currently, initialization is not supported for Zoho Commerce in iPaaS.com. All data synchronization and mappings must be configured manually during the integration process.

There is no bulk first-load of an existing catalog or order history. To move a large existing data set, use the bulk sync using Postman pattern, which drives the same per-record transfers the integration already supports.

Throttling

Throttling limits how quickly the subscription calls Zoho Commerce, so a large transfer does not overwhelm the store API or trigger rate-limit rejections. The same controls exist in the opposite direction for calls made to iPaaS.com.

While the throttling fields are required, the values are pre-populated by the integration settings and do not normally need to be changed. Reduce API Throttle Limit or increase API Throttle Seconds if you begin seeing rate-limit errors under Dashboard / Integration Monitoring / Error Logs; Concurrent Connections controls how much work the subscription runs at once and should only be changed on advice from iPaaS.com Support at support@ipaas.com or your MiSP.

Zoho does not publish a call quota for the Zoho Commerce store API, and a store may still refuse calls made too quickly, so there is no target figure to tune towards. Stagger large catalog or inventory runs rather than sending everything at once, and validate throughput in a staging environment before relying on it in production.

For field-by-field guidance on these controls, refer to Subscription Configuration – Edit.

Related Documents

Did this answer your question?