Zendesk is happy to announce that on November 4th 2019, the following enhanced product security features will be available at all plan levels, giving you more tools to keep your data safe.
Dark blue = Previously available, Yellow = Newly available
Configurable Password Policy
Zendesk Support/Guide provides the following levels of password security: low, medium, and high, as well as set custom password rules for agents and admins. Zendesk also allows for different password security levels to apply to end users vs. agents and admins. Only admins can change the password security level.
Moving forward, all accounts will have the ability to allow their staff more custom password settings.
Single sign-on (SSO) allows you to authenticate users in your own systems without requiring them to enter additional login credentials for your Zendesk Support instance. Both JSON Web Token (JWT) and Security Assertion Markup Language (SAML) are supported.
Moving forward, all accounts will be able to support single-sign on for staff and end users using either JWT or SAML.
Zendesk Support can be configured to only allow access from specific IP address ranges you define. These restrictions can be applied to all users or only to your agents.
Moving forward, all accounts will be able to restrict access to defined IP addresses.
Custom session expiration
Zendesk Support allows you to specify how long an agent can be idle before requiring them to log in again.
Moving forward, all accounts will have the ability to control their session expiration for staff members.
Want to know more?
Learn more about enabling security settings on your account and how to configure new methods for authenticating staff members and end users.
Zendesk also recommends this article on Security best practices which guides you through some of our top security recommendations. This includes increasing password security for your agents, authenticating your agents through SSO, and using IP restrictions to control access to Zendesk Support.
The rollout begins on Monday November 4th and we expect it to be completed during the day and available to all accounts.