Configuring Single Sign-On for Zendesk

Solution:

Once single sign-on (SSO) is configured, users can access their Zendesk accounts with just their Active Directory or Microsoft Windows credentials. They can also access Zendesk accounts with just a single click from ADSelfService Plus’ web console.

Prerequisites

1. Log in to ADSelfService Plus as an administrator.
2. Navigate to Configuration → Self-Service → Password Sync/Single Sign On → Add Application, and select Zendesk from the applications displayed.

   

   Note: You can also find the Zendesk application you need from the search bar located in the left pane, or the navigation option in the right pane.
3. Click IdP details in the top-right corner of the screen.
4. In the pop-up that appears, copy the Login URL, Logout URL, and Sha256 Fingerprint values.

Zendesk configuration steps:

1. Log in to Zendesk with administrator credentials.
2. Navigate to the Admin Center by clicking the menu icon near the profile icon.

   

3. In the Admin Center, navigate to Security → Single Sign-on.
4. Click Configure in the SAML section.

   

5. Select the Enabled checkbox.
6. In the SAML SSO URL field, enter the URL for signing in to your system and Zendesk (refer to Step 4 of Prerequisites).
7. In the Certificate Fingerprint field, enter the certificate fingerprint obtained from the product(refer to Step 4 of Prerequisites).

   

8. For the Remote Logout URL, enter the URL users should be redirected to when they sign out (refer to Step 4 of Prerequisites).
9. Make note of the Assertion Consumer Service (ACS) URL, as it will be input in the SAML Redirect URL field during the ADSelfService Plus configuration.

   

10. Click Save.
11. Enable SAML Single Sign-On for end users by navigating to Security → End Users.
12. Select External authentication.

    

13. Click Save.

ADSelfService Plus configuration steps

1. Now switch to ADSelfService Plus’ Zendesk configuration page.
2. Enter the Application Name and Description.
3. Under the Assign Policies field, select the policies for which SSO needs to be enabled.
   Note: ADSelfService Plus allows you to create OU- and group-based policies for your AD domains. To create a policy, go to Configuration → Self-Service → Policy Configuration → Add New Policy.
4. Select Enable Single Sign-On.
5. Enter the Domain Name of your Zendesk account. For example, if you use johndoe@thinktodaytech.com to log in to Zendesk, then thinktodaytech.com is the domain name.
6. Enter the SAML Redirect URL you saved in Step 9 of Zendesk configuration steps.
7. Click Add Application.

Your users can now sign in to Zendesk through ADSelfService Plus.