This section describes how to integrate Zendesk for Service with RSA Cloud Authentication Service using My Page SSO.

Configure RSA Cloud Authentication Service

Perform these steps to configure RSA Cloud Authentication Service using My Page SSO.

Procedure

1. Enable My Page SSO by accessing the RSA Cloud Administration Console > Access > My Page > Single Sign-On (SSO). 
   Ensure it is enabled and protected using two-factor authentication - Password and Access Policy.                                                    
2. On the Applications > Application Catalog page, search for Zendesk and click Add to add the connection.                                    
3. On the Basic Information page, enter a name for the configuration in the Name field and click Next Step.                                     
4. On the Connection Profile page, click the IdP-initiated option.                                                                                                             
5. Provide the Service Provider details in the following format: 
   1. ACS URL: <Zendesk ACS URL> 
   2. Service Provider Entity ID: <Zendesk Entity ID>
      See the Notes section for instructions on how to obtain the ACS URL and Entity ID.                                                                   
6. In the SAML Response Protection section, choose IdP signs assertion within response.
7. Download the certificate by clicking Download Certificate.                                                                                                                   
8. Click Show Advanced Configuration.
9.  Under the User Identity section, configure Identifier Type and Property. For example, Identifier Type: emailAddress and Property: mail.                                                                                                                                                 
10. Click Next Step.
11. Choose your desired Access Policy for this application and click Next Step > Save and Finish.                                                     
12. On the My Applications page, click the Edit drop-down list and select Export Metadata to download the metadata.                     
13. Click Publish Changes. Your application is now enabled for SSO.                                                                                                     

Notes

ACS URL can be obtained from the SSO Configuration page of Zendesk for Service under the SAML SSO URL section.
Entity ID can be obtained by removing /access/saml/ from the ACS URL.                                                                                                        

Configure Zendesk for Service

Perform these steps to configure Zendesk for Service.

Procedure

1. Sign in to Zendesk for service with the admin credentials.
2. Navigate to Settings > Single sign on and click Configure.                                                                                                                        
3. Click Create SSO configuration and select SAML.                                                                                                                        
4. Provide the following details:
   1. Configuration name.
   2. SAML SSO URL: Obtain from the metadata file downloaded from RSA.
   3. Certificate fingerprint: See the Notes section notes for the instructions on how to obtain the certificate fingerprint.                        
5. Scroll down and select the Show button when users sign in checkbox.
6. Provide a name for the button and click Save.                                                                                                                                              
7. Under the Team member authentication and End user authentication sections, do the following:
   1. Select the External authentication checkbox.
   2. Choose Single sign on (SSO).
8. Select the checkbox for the configuration that you created.
9. Choose the Let them choose option and click Save.                           

Notes

To obtain certificate fingerprint:

1. Install the latest version of OpenSSL for Windows.
2. Open the Windows Command-line interface. 
3. Navigate to the OpenSSL installation directory (the default directory is C:\OpenSSL-Win32\bin). 
4. Run the following commands to view the certificate fingerprint/thumbprint. 
   openssl x509 -noout -fingerprint -sha1 -inform pem -in <Certificate.pem>                                                                                                

The configuration is complete.

Return to Zendesk - RSA Ready Implementation Guide.