Enabling social and business single sign-on (SSO)

Return to top
Have more questions? Submit a request

19 Comments

  • Pedro Rodrigues

    Is there a way to see the users who specifically have signed up/in using social?

    0
  • Dennis Lynn

    Hey Pedro! There is a way to see which users have social media contacts listed in their profile. Though this doesn't tell you how they logged in last, it would at least give you an idea of which users maybe have signed in via social media auth. You can see these contact methods as an example in step 6 under "How social and business SSO works in Zendesk Support" above.  

    The one wrinkle to this is that if your user submitted a request via Twitter, for example, you will see a user profile for that individual that has a Twitter handle listed as a contact method. In this particular case, this user never actually signed in, but the way they submitted a request allowed for the creation of a profile using their twitter handle. This is necessary to ensure when you respond to their ticket, the followup is sent appropriately. 

    Long-story short, there really is no way to see exactly which users have ever signed in via a social media authentication method. If you don't have any social media channels enabled for ticket submission, however, then you can safely assume that any social media contact information for users is the direct result of them using this sign-in method to access your Help Center. 

    0
  • Pedro Rodrigues

    Thanks a lot for the clarification, Dennis. Another question, please: is there a way to see who specifically used social auth in the Chat pre-form? I'd like to see if offering those options are useful or not.

    0
  • Justin Wedes

    If a user is signing in with Microsoft and their Office365 account password changes or their account is disabled by the organization's IT, will they be automatically logged out and unable to log back into Help Center?

    0
  • Gail L
    Zendesk Community Team

    Hi Justin,

    If the SSO authentication fails, then the users will be unable to log in to Zendesk using it. I wouldn't describe it as automatic, but if they were logged in at the time that the information changed, then the next time their session refreshed they would be prompted to reauthenticate.

    They might still be able to log in if they have a separate password set up within Zendesk, and are using the youraccountname.zendesk.com/access/normal path to try and log in as a backup (though they would need to be aware of that path as an option first). 

     

    0
  • Justin Wedes

    Is it possible to allow end-users only the option to sign in with Social and business single sign-on (and not Zendesk sign-in)?

    0
  • Brett - Community Manager
    Zendesk Community Team

    Hey Justin,

    There's no way to toggle off the native Zendesk login and only use the social media single sign-on at this time. The only way to remove the native Zendesk login as an option is by setting up SSO for your end-users. More information on the different SSO options in our SSO (single sign-on) options in Zendesk article.

    Hope this helps!

    0
  • Fabien Brissonneau

    Hello

    I try to use business SSO. The backend do th job...

    But I need to get the JWT token sent back in my private app. How can I get this token ?

    0
  • Gentry Geissler
    Zendesk team member

    Hi Fabien!

    Thanks for your question today! It looks like you have an open ticket about this one already, so I will let the advocate know! If you have any further questions, it will be a good idea to respond to his email. 

    Hope that helps.

    0
  • Yulia

    Hi there.

    Is there a way to access Zendesk using vk.com profile? Are you considering to add such an option? Thanks

    0
  • Devan - Community Manager
    Zendesk Community Team

    Hello Yulia,

    The best wat to accomplish this would be through the vk.com Zendesk app, which you can find in the Zendesk Marketplace, which I've linked below. As for future updates to make this more native, we currently have nothing on the roadmap, but I would recommend posting your suggestion in our product feedback forums so our developers can consider your ask for future updates. 

    Zendesk vk.com

    Best regards. 

    0
  • Yulia

    Thank you Devan. I know about this app, but unfortunately this one doesn't allow users log in in Zendesk using their vk profiles. This is topic about SSO and my question was about SSO, I wonder if Zendesk's going to allow users to log in using their vk account.

    0
  • Brett - Community Manager
    Zendesk Community Team

    Hey Yulia,

    Nothing on the roadmap currently that would allow vk as a social/business SSO. You'd most likely need to set up JWT or SAML SSO to allow your users to sign in using their vk.com credentials. More information on the available SSO options here: SSO (single sign-on) options in Zendesk .

    Let me know if you have any other questions.

    Cheers!

    0
  • Jee Han

    Hi there,

    I have a question on the SSO. My organization's Zendesk application is actually linked to our organization's SSO policy stringed via Microsoft and therefore for every Zendesk applications used i.e. Zendesk Support, Zendesk Guide and Zendesk Talk a SSO is required to log into any of these Zendesk applications.

    For my Zendesk Guide however, we are building our knowledge base guides that are intended for internal use as well as for external use (i.e. to our external clients). Given that the restriction of organization SSO that we have integrated for our Zendesk applications these guides that we have built would not be accessible to these external parties due to our SSO policy.

    Hence my question for your team would be is it possible that we can actually customize or pick and choose which of the Zendesk applications that can be enabled with the SSO i.e. enable SSO for Zendesk Support and disable SSO for Zendesk Guide or will the SSO enablement be effective for the entire Zendesk applications within the subscribed suite? We would still like to enable SSO for Zendesk Support but just not for Zendesk Guide, can this be done?

    Hoping to hear from you guys soon.

    Thanks a bunch!

    Jee


    0
  • Devan - Community Manager
    Zendesk Community Team

    Hello Jee Han,

    No, this would not be possible. Although Zendesk allows you to set up different authentication methods for agents and end-users and you can setup Guide to be accessible to everyone then set the article permissions based on the organization the user is in. I've shared some articles below that goes into further detail on this topic. 

    SSO (single sign-on) options in Zendesk

    Creating user segments for Guide user permissions

    Best regards. 

    0
  • Niclas Kårlin

    If I set End users to login using External with SAML, and Admins using External with Microsoft, what would be the link to provide to the Agents?

    I know about these:

    https://your_subdomain.zendesk.com/access/sso_bypass 

    https://your_subdomain.zendesk.com/access/normal

    https://your_subdomain.zendesk.com/access/saml   (seems to be just for the setup... doesn't work to click on.)

    is there a 

    https://your_subdomain.zendesk.com/access/microsoft 
    https://your_subdomain.zendesk.com/access/agent

    or something like that?

     

     

    0
  • Gail L
    Zendesk Community Team

    Hi Niclas,

    There isn't a https://your_subdomain.zendesk.com/access/microsoft address, or a https://your_subdomain.zendesk.com/access/agent address. 

    What the SSO login urls look like can vary depending the which SSO service is being used. If your company uses Microsoft's Active Directory and wants to set up that using SAML you you'd most likely end up with a login url similar to examples in this article. 

    0
  • Niclas Kårlin

    Gail L the last link was incorrect I assume.

    0
  • Gail L
    Zendesk Community Team

    Argh, yes, I was trying to link to Setting up single sign-on using Active Directory with ADFS and SAML

    0

Please sign in to leave a comment.

Powered by Zendesk