Plan requirement
| Subscription | Suite Enterprise or higher, Support Enterprise |
| Access | Admin |
Yes, on Enterprise. It is how joining and leaving stop depending on somebody remembering.
What it does
Your identity provider creates, updates and deactivates Zendesk accounts automatically, based on what happens in the directory. A new starter gets access; a leaver loses it, the same day.
Why it matters
Offboarding is where most real incidents begin. An active account belonging to somebody who left is the account nobody is watching, and it exists because a manual step was missed.
Automating that removes the most common security gap in any support account.
It is not single sign-on
Single sign-on governs how somebody signs in. This governs whether their account exists at all. They complement each other and neither replaces the other.
Together they are the arrangement worth aiming for.
Map the roles carefully
Which directory group becomes an agent, which becomes an admin, which becomes a light agent. Get that wrong and either people cannot work, or everybody is an admin.
Test with one person
Create somebody in the directory and watch what appears here. Then deactivate them and check the account is disabled. Both directions, before relying on it.
Decide what happens to their tickets
Automatic deactivation does not reassign open tickets. Those still need a step, or work sits assigned to somebody who has gone.
Set it up with us
Contact pluscloud support. This touches your identity provider and your role structure, and it is worth getting right the first time.
Comments
0 comments
Article is closed for comments.