IDP-initiated and SP-initiated logins are two different methods for authenticating users in Zendesk. In an IDP-initiated login, users start at the SSO provider's login page, such as Okta, and are then authenticated into Zendesk and other sites. This method requires the proper shared secret for JWT or certificate for SAML.
On the other hand, SP-initiated login starts when a user selects 'Login' from your help center or navigates directly to the 'Sign in' link. Both methods can be used to authenticate users, but they differ in the starting point of the login process.
To set up multiple SSO integrations for different Zendesk help centers, you can use the 'Let them choose' option or follow a specific workaround. The default Zendesk authentication method allows for multiple SSO options. You can set a primary SSO…
Yes, you can use both SAML and JWT for SSO in Zendesk. You can have both enabled with JWT as the default option. For instance, you can create an 'Agent tab' on your custom landing page specifically for JWT. This setup allows you to leverage the…
To ensure proper authentication for IDP-initiated logins in Zendesk, you need to have the correct shared secret for JWT or certificate for SAML. This is crucial for users who start at the SSO provider's login page, such as Okta, and then…
The 'Let them choose' option in Zendesk allows you to present multiple SSO login buttons to users, giving them the choice of which SSO method to use. This is particularly useful if you have multiple help centers and want to offer different SSO…