Can I configure my account to allow agents to use single sign-on to log in while keeping end users restricted to Zendesk login?
Yes, you can turn on and off SSO settings for your staff and end users separately.
You can require that admins or agents login with the Zendesk login. Or you can configure your account to allow your admins and agents to sign in with Google, Microsoft, or an enterprise SSO.
For end users, you can allow them to login only with the Zendesk login. Or, you can enable login with any or all social accounts (Google, Microsoft, Twitter, Facebook). You can also set up an enterprise SSO for end users.
For more information on how to set up single sign-on for each of your user groups, read the article: Enabling social and business single sign-on (SSO).