direct access to https://stratus.zendesk.com/access/jwt?jwt=<token> without passing through configured login url

3 Kommentare

  • Dainne Lucena
    Zendesk Customer Care

    Hi Magdalena Luz!

    Yes, the redirect call is mandatory. SSO is used to authenticate if that user does have access to the Guide products. So the redirect is the one confirming if they have access to your Help Center. Please do let me know if the error 404 is still an ongoing issue for your team so I can help you look into that.

    0
  • Magdalena Luz

    Thanks for your answer, what I don't understand about it, all our users have access to the Help Center, that is why we want to use SSO, and that is the point of SSO... we authenticate them and Zendesk must trust us that we do it right in our App. There is no way for Zendesk to check that because none of our users is registered with Zendesk. We construct the Zendesk token and with this we say she is fine. So why exactly do you need the redirect?

    0
  • Dainne Lucena
    Zendesk Customer Care

    Hi Magdalena!

    The purpose of SSO is to use a different authentication method (not Zendesk) that will allow them access to Zendesk. Once they are authenticated in SSO, they will return back to Zendesk. For example, if it's an agent it will route to the Support dashboard. If it's an end-user, it will route back to the Help Center page. That is the purpose of the redirect.

    Hope this helps!

    0

Bitte melden Sie sich an, um einen Kommentar zu hinterlassen.

Powered by Zendesk