Integration with Zendesk SP

[abdul waheed]

Hi,

Some time back, I have worked integrated Shibboleth Idp 2.4 with Zendesk. I
guess It can help you in your issue.

http://www.waheedtechblog.com/2015/10/configure-shibboleth-idp-to-achieve.html

Regards,
Abdul Waheed.


On Sat, Apr 8, 2017 at 8:14 AM, Hwei Chan <hwei at nextidea.co.nz> wrote:

> Hi
>
> Just wondering if anyone has successfully integrated Zendesk to Shibboleth
> IdP?
>
> The aim is to get SSO working from Zendesk (and a few other third party
> services) to our Shibboleth IdP instance.
>
> I'm new to Shibboleth and SAML in general but have managed to get SSO
> working with a few sample SAML service providers (including TestShib).
>
> However, I'm having trouble getting the setup for Zendesk working.
>
> I've tried to follow the instructions provided by Zendesk here:
>
> https://support.zendesk.com/hc/en-us/articles/203663676
>
> They seem to require at least:
>
> * Remote login URL for the SAML server (Shibboleth)
> * SHA2 fingerprint for the SAML certificate from the SAML server
>
> The only thing I've found regarding the Zendesk SP metadata is:
>
> <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
> <EntityDescriptor entityID="your_subdomain.zendesk.com"
> xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
>     <SPSSODescriptor AuthnRequestsSigned="false"
> WantAssertionsSigned="true" protocolSupportEnumeration="
> urn:oasis:names:tc:SAML:2.0:protocol">
> <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
>
>         <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
> Location="https://accountname.zendesk.com/access/saml"
> <https://accountname.zendesk.com/access/saml>/> <!-- Note: replace
> 'accountname' with your Zendesk subdomain -->
>     </SPSSODescriptor>
> </EntityDescriptor>
>
> The other SPs I've tried requires the IdP's metadata (which Zendesk
> doesn't seem to ask for) and the other SPs metadata seem to contain a lot
> more info then the above.
>
> I've tried a couple of things but none of them have worked.
>
> Would really appreciate any advise from the Shibboleth experts on the
> appropriate configuration required to get integration to work.
>
> Thanks in advance!
>
> Regards,
> Hwei
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170408/9a328c07/attachment.html>