Integration with Zendesk SP

[Hwei Chan]

Hi

Just wondering if anyone has successfully integrated Zendesk to 
Shibboleth IdP?

The aim is to get SSO working from Zendesk (and a few other third party 
services) to our Shibboleth IdP instance.

I'm new to Shibboleth and SAML in general but have managed to get SSO 
working with a few sample SAML service providers (including TestShib).

However, I'm having trouble getting the setup for Zendesk working.

I've tried to follow the instructions provided by Zendesk here:

https://support.zendesk.com/hc/en-us/articles/203663676

They seem to require at least:

* Remote login URL for the SAML server (Shibboleth)
* SHA2 fingerprint for the SAML certificate from the SAML server

The only thing I've found regarding the Zendesk SP metadata is:

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<EntityDescriptor entityID="your_subdomain.zendesk.com" 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
     <SPSSODescriptor AuthnRequestsSigned="false" 
WantAssertionsSigned="true" 
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat> 

         <AssertionConsumerService index="1" 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://accountname.zendesk.com/access/saml"/> <!-- Note: 
replace 'accountname' with your Zendesk subdomain -->
     </SPSSODescriptor>
</EntityDescriptor>

The other SPs I've tried requires the IdP's metadata (which Zendesk 
doesn't seem to ask for) and the other SPs metadata seem to contain a 
lot more info then the above.

I've tried a couple of things but none of them have worked.

Would really appreciate any advise from the Shibboleth experts on the 
appropriate configuration required to get integration to work.

Thanks in advance!

Regards,
Hwei
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170408/da0b950e/attachment-0001.html>