<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi
<br>
<br>
Just wondering if anyone has successfully integrated Zendesk to
Shibboleth IdP?
<br>
<br>
The aim is to get SSO working from Zendesk (and a few other third
party services) to our Shibboleth IdP instance.
<br>
<br>
I'm new to Shibboleth and SAML in general but have managed to get
SSO working with a few sample SAML service providers (including
TestShib).
<br>
<br>
However, I'm having trouble getting the setup for Zendesk working.
<br>
<br>
I've tried to follow the instructions provided by Zendesk here:
<br>
<br>
<a class="moz-txt-link-freetext"
href="https://support.zendesk.com/hc/en-us/articles/203663676">https://support.zendesk.com/hc/en-us/articles/203663676</a>
<br>
<br>
They seem to require at least:
<br>
<br>
* Remote login URL for the SAML server (Shibboleth)
<br>
* SHA2 fingerprint for the SAML certificate from the SAML server
<br>
<br>
The only thing I've found regarding the Zendesk SP metadata is:
<br>
<br>
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<br>
<EntityDescriptor entityID="your_subdomain.zendesk.com"
xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
<br>
<SPSSODescriptor AuthnRequestsSigned="false"
WantAssertionsSigned="true"
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<br>
<NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
<br>
<AssertionConsumerService index="1"
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location=<a
class="moz-txt-link-rfc2396E"
href="https://accountname.zendesk.com/access/saml">"https://accountname.zendesk.com/access/saml"</a>/>
<!-- Note: replace 'accountname' with your Zendesk subdomain
-->
<br>
</SPSSODescriptor>
<br>
</EntityDescriptor>
<br>
<br>
The other SPs I've tried requires the IdP's metadata (which Zendesk
doesn't seem to ask for) and the other SPs metadata seem to contain
a lot more info then the above.
<br>
<br>
I've tried a couple of things but none of them have worked.
<br>
<br>
Would really appreciate any advise from the Shibboleth experts on
the appropriate configuration required to get integration to work.
<br>
<br>
Thanks in advance!
<br>
<br>
Regards,
<br>
Hwei
</body>
</html>