---
locale: "en"
updated_at: "2025-10-27T22:49:28.053Z"
canonical: "https://www.isdecisions.com/en/userlock/docs/guides/sso/configure-the-applications/zendesk"
---

# Configure Zendesk for UserLock Single Sign-On (SSO)

Configure SSO access for Zendesk agents and users.

## Introduction

This guide explains how to integrate **Zendesk** with **UserLock Single Sign-On (SSO)** using the **SAML 2.0** protocol.

Once configured, Zendesk logins are authenticated by **UserLock** against **Active Directory**, allowing administrators to enforce UserLock [access policies](/userlock/docs/reference/core-concepts/access-policies) (MFA, time, machine, or location restrictions) on SSO sessions.

🚩 **Before starting:**

- You must have a **Zendesk administrator account**.
- **UserLock SSO** must already be [installed and configured](/userlock/docs/guides/sso/install-configure-sso).

## Step 1. Enable Zendesk in UserLock SSO

1. In the **UserLock console**, go to ⚙ **Server settings ▸ Single Sign-On**.
2. In the list of applications, select **Zendesk**.
3. Fill in the fields with the following values:
  | Settings | Values |
  | --- | --- |
  | Application Domain | Your Zendesk instance domain  (e.g. `https://yourdomain.zendesk.com`) |
  | Email domain | The email domain used by users to sign in (e.g. `contoso.com`) |
4. Save the profile.

![](https://a.storyblok.com/f/122374/590x769/858e2545c3/zendesk_settings.PNG)

## Step 2. Configure Zendesk for Single Sign-On

1. From your **Zendesk Admin Center**, go to **Admin ▸ Settings ▸ Security**.
2. Under the **Global** tab, click **Manage security settings in Admin Center**.
  ![](https://a.storyblok.com/f/122374/900x512/c5a5bee0f5/zendesk-configure.png)
3. Under the **Single sign-on** tab, locate the **SAML** section and click **Configure**.
4. Complete the form using the following values:
  | Field | Value |
  | --- | --- |
  | SAML enabled | ✅ Checked |
  | SAML SSO URL | `https://<SSO_address>/saml/sso` |
  | Certificate fingerprint | 1. In the **UserLock console**, go to ⚙ **Server settings ▸ Single Sign-On**. 2. Click on **Download ▸ SAML certificate** 3. Open the downloaded file with a text editor (e.g. Notepad) and copy its contents. |
  | Remote logout URL | `https://<SSO_address>/connect/endsession` |
  
  ![](https://a.storyblok.com/f/122374/603x847/fa55fe946e/zendesk-settings.png)
5. **Save** the form.
6. Activate the option **External Authentication for Staff Members**. Ensure that the **Single sign-on option** is selected.
7. Click **Save** when finished. Zendesk is now configured to use UserLock SSO.

## Troubleshooting

For common issues, see [Troubleshooting SSO](/userlock/docs/support/troubleshooting/sso-issues).
If the problem persists, please contact [IS Decisions Support](/support).

### Handling SSO unavailability  

If SSO temporarily fails or you need to regain access manually:

1. Go to `https://<yourZendeskDomain>.zendesk.com/access/sso_bypass`
2. Enter a valid email address. Zendesk will provide a **bypass URL** for direct login.

## Next steps

You can extend the security of SSO sessions by applying UserLock access policies in addition to authentication.

- [Apply MFA on SaaS connections](/userlock/docs/guides/mfa-implementation/mfa-for-sso) to require stronger authentication.
- [Hour restrictions](/userlock/docs/reference/access-policies/time-restriction): define when users are allowed to connect.
- [Geolocation rules](/userlock/docs/reference/access-policies/geolocation): enforce access policies based on user location.
- [Session limits](/userlock/docs/reference/access-policies/session-limit): allow or deny SaaS logins entirely for specific users.