Plan requirement
| Subscription | Suite Enterprise or higher, Support Enterprise |
| Access | Admin |
Yes, SCIM 2.0, through a provider such as Okta or Entra. It decides whether accounts exist; single sign-on decides how people get in.
Does Zendesk support SCIM? Can we provision users automatically? Can accounts be deactivated when someone leaves?
Yes. Zendesk supports SCIM 2.0, driven from an identity provider such as Okta or Microsoft Entra. Your directory creates, updates and deactivates Zendesk accounts on its own.
This is not single sign-on and does not replace it. Single sign-on governs how somebody signs in; this governs whether their account exists at all.
The reason to bother is offboarding. An active account belonging to somebody who left is the account nobody watches, and automating that closes the most common gap in any support account.
What to settle before you switch it on
Confirm your plan first. Ask us whether your subscription includes automated provisioning before you build a project around it.
Zendesk does not support the third-party side. Their documentation says plainly that they do not support third-party technologies, so when provisioning misbehaves the answer sits with your identity provider, or with us.
Map the roles deliberately. Which directory group becomes an agent, an admin, a light agent. Get it wrong and either people cannot work or everybody is an admin.
Deactivation does not reassign tickets. An account switched off automatically leaves its open tickets with somebody who has gone. That step remains manual, and it is the one people forget because the rest is not.
Test both directions with one person before relying on it: create somebody in the directory and watch the account appear, then deactivate them and confirm it is disabled.
Set it up with us. It touches your identity provider and your role structure at the same time, and it is worth getting right on the first attempt.
Comments
0 comments
Article is closed for comments.