Free trial

Azure configuration for DESK SSO

Follow the examples below to configure DESK SSO using Azure as the SAML identity provider (IdP).

Important: Use this IdP-specific help as part of the entire SAML configuration procedure for DESK SaaS.

  1. In the Azure portal, choose Enterprise Applications from the Azure Active Directory.

  2. Click the New Application button and choose Non-gallery application.

  3. Type the name of the application (for example, DESK) and click Add to add the application.

  4. Choose Single sign-on from the application’s left-hand navigation menu and choose SAML as the single sign-on method.

  5. Click Upload metadata file and choose the DESK metadata file.
    DESK SSO SP metadata is provided at https://sso.desk.com/sso/metadata.

  6. In Basic SAML Configuration, set Logout Url to https://sso.desk.com:443/saml2/sp/logout and save your changes.

  7. Return to the Single sign-on preview.

  8. To enable SAML authorization in DESK SSO, you need to add the group attribute to SAML. Edit User Attributes & Claims and Groups returned in claim.

  9. Return to the Single sign-on preview and edit SAML Signing Certificate.

  10. In Signing Option, select Sign SAML response and assertion.

  11. Return to the Single sign-on preview and download Federated Metadata XML.

  12. Choose User and groups from the application’s left-hand navigation to configure user access to the DESK application.

  13. In DESK Account Configuration, provide the metadata you downloaded as Federated Metadata XML and set the following attributes:

    First name attribute http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname
    Last name attribute http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname
    Security group claim attribute http://schemas.microsoft.com/ws/2008/06/identity/claims/groups

Note that in the SAML message returned by Azure, groups are identified with an ObjectId, not a group name. When configuring the user group mapping, make sure you use ObjectId in Security group claim name as in this example.