Managing single sign-on (SSO) configurations

<body>
<p id="docs-hc-snippet" style="display: none;">Zendesk provides the ability to create multiple SSO authentication configurations for different collections of users.</p>
<div class="article-banners">
<div id="docs-wmp-link">
<a href="https://support.zendesk.com/hc/en-us/articles/5411234991258-plan" rel="noopener" target="_blank">What's my plan?</a>
</div>

<div class="article-banner" id="suite_all">
<table>
<tbody>
<tr>
<td>
<strong>All Suites</strong>
</td>
<td>Team, Growth, Professional, Enterprise, or Enterprise Plus</td>
</tr>
</tbody>
</table>
</div>

<div class="article-banner" id="support_all">
<table>
<tbody>
<tr>
<td>
<strong>Support</strong>
</td>
<td>Team, Professional, or Enterprise</td>
</tr>
</tbody>
</table>
</div>

</div>
<div id="docs-ai-summary">
<p id="docs-ai-summary-toggle">Summary: <span id="up-triangle">◀</span><span id="down-triangle">▼</span></p>
<p id="docs-ai-summary-content">You can manage multiple single sign-on (SSO) configurations for different user groups, including creating, editing, activating, deactivating, and deleting them. Set a primary SSO method to control user sign-in experience and add custom "Continue with SSO" buttons to the sign-in page. This helps tailor authentication options for team members and end users, improving access management and user experience.</p>
</div>

<div class="body">

<div class="note fastpath">
<span class="fastpathtitle">Location: </span> <span class="ph">Admin Center &gt; Account &gt; Security &gt; Single
sign-on</span>
</div>
<p class="p">Zendesk provides the ability to create multiple SSO authentication configurations for
different collections of users.</p>
<div class="p">See the following articles to learn how to create your SSO configurations, depending on
the authentication protocols you're using:<ul class="ul" id="topic_b1q_yz4_tsb__ul_yjm_jkx_tcc">
<li class="li"><a class="xref" href="https://support.zendesk.com/hc/en-us/articles/4408887505690" target="_blank">Enabling SAML single sign-on</a></li>
<li class="li"><a class="xref" href="https://support.zendesk.com/hc/en-us/articles/7957465432474" target="_blank">Setting up single sign-on with OpenID Connect
(OIDC)</a></li>
<li class="li"><a class="xref" href="https://support.zendesk.com/hc/en-us/articles/4408845838874" target="_blank">Enabling JWT single sign-on</a></li>
</ul>
</div>
<p class="p">After you've created your SSO configurations, you can view and manage them on the Single
sign-on page in Admin Center.</p>
<div class="p">This article covers the following topics:<ul class="ul" id="topic_b1q_yz4_tsb__ul_djj_dyy_5sb">
<li class="li"><a class="xref" href="#topic_jyz_2bz_5sb">Viewing your SSO configurations</a></li>
<li class="li"><a class="xref" href="#topic_gz4_qbz_5sb">Editing SSO configurations</a></li>
<li class="li"><a class="xref" href="#topic_vzw_tbz_5sb">Activating or deactivating SSO configurations</a></li>
<li class="li"><a class="xref" href="#topic_c55_3sf_vsb">Setting the primary SSO configuration</a></li>
<li class="li"><a class="xref" href="#topic_rqg_yw4_2yb">Adding "Continue with SSO" buttons to the Zendesk sign-in page</a></li>
<li class="li"><a class="xref" href="#topic_tq5_jvf_2yb">Deleting SSO configurations</a></li>
</ul>
</div>
</div>
<div aria-labelledby="ariaid-title2" class="topic nested1" id="topic_jyz_2bz_5sb">
<h2 class="title topictitle2" id="ariaid-title2">Viewing your SSO configurations</h2>
<div class="body">
<p class="p">Your SSO configurations display on the Single sign-on page in Admin Center in a list
sorted from newest to oldest. The list includes the configuration's name, the type
of configuration (SAML, OIDC, or JWT), which types of users it's assigned to, and
whether it's active or inactive. </p>
<div class="p">
<strong class="ph b">To view your SSO configurations</strong><ul class="ul" id="topic_jyz_2bz_5sb__ul_whj_skh_2yb">
<li class="li"><span class="ph">In <a class="xref" href="https://support.zendesk.com/hc/en-us/articles/4581766374554#topic_hfg_dyz_1hb" target="_blank">Admin Center</a>, click <img class="image" id="topic_jyz_2bz_5sb__d9e323" src="https://zen-marketing-documentation.s3.amazonaws.com/docs/en/ac_account_icon.png">
<strong class="ph b">Account</strong> in the sidebar, then select <strong class="ph b">Security &gt; Single sign-on</strong>.</span></li>
</ul>
</div>
<p class="p"><img class="image img-screenshot" id="topic_jyz_2bz_5sb__image_nfz_1bb_msb" src="https://zen-marketing-documentation.s3.amazonaws.com/docs/en/auth_sso_configs.png" width="700"></p>
</div>
</div>
<div aria-labelledby="ariaid-title3" class="topic nested1" id="topic_gz4_qbz_5sb">
<h2 class="title topictitle2" id="ariaid-title3">Editing SSO configurations</h2>
<div class="body">
<p class="p">You may need to edit your SSO configurations after you create them. For example, you
may need to create a new shared secret for a JWT configuration or update the remote
login page URL.</p>
<p class="p"><strong class="ph b">To edit an SSO configuration</strong></p>
<ol class="ol" id="topic_gz4_qbz_5sb__ol_wtz_3lz_5sb">
<li class="li" dir="ltr"><span class="ph">In <a class="xref" href="https://support.zendesk.com/hc/en-us/articles/4581766374554#topic_hfg_dyz_1hb" target="_blank">Admin Center</a>, click <img class="image" id="topic_gz4_qbz_5sb__d9e323" src="https://zen-marketing-documentation.s3.amazonaws.com/docs/en/ac_account_icon.png">
<strong class="ph b">Account</strong> in the sidebar, then select <strong class="ph b">Security &gt; Single sign-on</strong>.</span></li>
<li class="li">Click the option menu icon (<img class="image" id="topic_gz4_qbz_5sb__image_ggg_glz_5sb" src="https://zen-marketing-documentation.s3.amazonaws.com/docs/en/uc_options_icon.png">) and select <strong class="ph b">Edit</strong> for the SSO configuration
you want to edit.</li>
</ol>
</div>
</div>
<div aria-labelledby="ariaid-title4" class="topic nested1" id="topic_vzw_tbz_5sb">
<h2 class="title topictitle2" id="ariaid-title4">Activating or deactivating SSO configurations</h2>
<div class="body">
<p class="p">SSO configurations are active when they are assigned to either team members or end
users. To inactivate an SSO configuration, you must unassign it from both team
members and end users, if applicable. </p>
<p class="p"><strong class="ph b">To activate or deactivate an SSO configuration</strong></p>
<ol class="ol" id="topic_vzw_tbz_5sb__ol_jdw_vfh_2yb">
<li class="li">Open the Security settings for team members or end users:<ul class="ul" id="topic_vzw_tbz_5sb__ul_vyz_pxr_5qb">
<li class="li"><span class="ph">In <a class="xref" href="https://support.zendesk.com/hc/en-us/articles/4581766374554#topic_hfg_dyz_1hb" target="_blank">Admin Center</a>, click <img class="image" id="topic_vzw_tbz_5sb__d9e293" src="https://zen-marketing-documentation.s3.amazonaws.com/docs/en/ac_account_icon.png">
<strong class="ph b">Account</strong> in the sidebar, then select <strong class="ph b">Security &gt; Team member
authentication</strong>.</span></li>
<li class="li"><span class="ph">In <a class="xref" href="https://support.zendesk.com/hc/en-us/articles/4581766374554#topic_hfg_dyz_1hb" target="_blank">Admin Center</a>, click <img class="image" id="topic_vzw_tbz_5sb__d9e308" src="https://zen-marketing-documentation.s3.amazonaws.com/docs/en/ac_account_icon.png">
<strong class="ph b">Account</strong> in the sidebar, then select <strong class="ph b">Security &gt; End user
authentication</strong>.</span></li>
</ul>
</li>
<li class="li">Under <strong class="ph b">External authentication</strong> &gt; <strong class="ph b">Single sign-on (SSO)</strong>, select the
configuration you want to activate. To inactivate a configuration, clear the
check box.</li>
<li class="li">Click <strong class="ph b">Save</strong>.</li>
</ol>
</div>
</div>
<div aria-labelledby="ariaid-title5" class="topic nested1" id="topic_c55_3sf_vsb">
<h2 class="title topictitle2" id="ariaid-title5">Setting the primary SSO configuration</h2>
<div class="body">
<div class="p">Depending on how you require users to sign in, you might need to set an SSO
configuration as the primary SSO method for team members or end users. As described
in <a class="xref" href="https://support.zendesk.com/hc/en-us/articles/5380943678106" target="_blank">Giving users different ways to sign into
Zendesk</a>, you can configure the sign-in experience one of two ways:<ul class="ul" id="topic_c55_3sf_vsb__ul_cng_lhg_2yb">
<li class="li">
<strong class="ph b">Let them choose</strong>: Display all active authentication options on the
sign-in page and allow users to choose how they sign in, or</li>
<li class="li">
<strong class="ph b">Redirect to SSO</strong>: Require users to sign in using the primary SSO
method. </li>
</ul>
You only have to set a primary SSO method if you redirect to SSO <em class="ph i">and</em>
have multiple SSO configurations active. Zendesk tries to determine whether an
unauthenticated user is an end user or team member and routes them to the remote
login page of the primary SSO.</div>
<p class="p"><strong class="ph b">To set a primary SSO method</strong></p>
<ol class="ol" id="topic_c55_3sf_vsb__ol_ddn_5sf_vsb">
<li class="li" dir="ltr">Open the Security settings for team members or end users. <ul class="ul" id="topic_c55_3sf_vsb__ul_vyz_pxr_5qb">
<li class="li"><span class="ph">In <a class="xref" href="https://support.zendesk.com/hc/en-us/articles/4581766374554#topic_hfg_dyz_1hb" target="_blank">Admin Center</a>, click <img class="image" id="topic_c55_3sf_vsb__d9e293" src="https://zen-marketing-documentation.s3.amazonaws.com/docs/en/ac_account_icon.png">
<strong class="ph b">Account</strong> in the sidebar, then select <strong class="ph b">Security &gt; Team member
authentication</strong>.</span></li>
<li class="li"><span class="ph">In <a class="xref" href="https://support.zendesk.com/hc/en-us/articles/4581766374554#topic_hfg_dyz_1hb" target="_blank">Admin Center</a>, click <img class="image" id="topic_c55_3sf_vsb__d9e308" src="https://zen-marketing-documentation.s3.amazonaws.com/docs/en/ac_account_icon.png">
<strong class="ph b">Account</strong> in the sidebar, then select <strong class="ph b">Security &gt; End user
authentication</strong>.</span></li>
</ul>
</li>
<li class="li">For <strong class="ph b">Primary SSO</strong>, select the name of the SSO configuration you want to
send users to by default.<p class="p">The <strong class="ph b">Primary SSO</strong> field is visible if you have
multiple SSO configurations active and you've selected <strong class="ph b">Redirect to
SSO</strong>.</p>
<p class="p"><img class="image img-screenshot" id="topic_c55_3sf_vsb__image_vvx_fnq_fyb" src="https://zen-marketing-documentation.s3.amazonaws.com/docs/en/auth_primary_SSO_2.png" width="600"></p>
</li>
<li class="li">Click <strong class="ph b">Save</strong>.</li>
</ol>
</div>
</div>
<div aria-labelledby="ariaid-title6" class="topic nested1" id="topic_rqg_yw4_2yb">
<h2 class="title topictitle2" id="ariaid-title6">Adding "Continue with SSO" buttons to the Zendesk sign-in page</h2>
<div class="body">
<p class="p">If you <a class="xref" href="https://support.zendesk.com/hc/en-us/articles/5380943678106" target="_blank">let users choose how to sign in</a>, you can
show a <strong class="ph b">Continue with SSO</strong> button on the Zendesk sign-in page for each active
SSO configuration. Customize the button labels so they are meaningful to your users.
If you offer multiple SSO sign-in methods, create unique labels so users know which
option to choose.</p>
<p class="p"><img class="image img-screenshot" id="topic_rqg_yw4_2yb__image_l4g_jj4_swb" src="https://zen-marketing-documentation.s3.amazonaws.com/docs/en/ac_security_team_member_login_SSO.png" width="500"></p>
<p class="p">You might not authenticate users this way. For example, if your users only sign in
using an identity provider (Idp-initiated SSO), you don't have to add SSO buttons
because your users don't use the Zendesk sign-in page. </p>
<p class="p"><strong class="ph b">To add an SSO button to the Zendesk sign-in page</strong></p>
<ol class="ol" id="topic_rqg_yw4_2yb__ol_i45_4tp_fyb">
<li class="li"><span class="ph">In <a class="xref" href="https://support.zendesk.com/hc/en-us/articles/4581766374554#topic_hfg_dyz_1hb" target="_blank">Admin Center</a>, click <img class="image" id="topic_rqg_yw4_2yb__d9e323" src="https://zen-marketing-documentation.s3.amazonaws.com/docs/en/ac_account_icon.png">
<strong class="ph b">Account</strong> in the sidebar, then select <strong class="ph b">Security &gt; Single sign-on</strong>.</span></li>
<li class="li">Click the option menu icon (<img class="image" id="topic_rqg_yw4_2yb__image_dzl_1qq_fyb" src="https://zen-marketing-documentation.s3.amazonaws.com/docs/en/uc_options_icon.png">) and select <strong class="ph b">Edit</strong> for the SSO configuration
you want to add to the sign-in page.</li>
<li class="li">Scroll to the bottom of the page and select <strong class="ph b">Show button when users sign
in</strong>.<p class="p"><img class="image img-screenshot" src="https://zen-marketing-documentation.s3.amazonaws.com/docs/en/auth_show_sso_button.png" width="400"></p>
</li>
<li class="li">In the <strong class="ph b">Button name</strong> field, enter the text that should follow "Continue
with." <p class="p">For example, typing <strong class="ph b">team member SSO</strong> creates a button labeled
<strong class="ph b">Continue with team member SSO</strong>.</p>
</li>
<li class="li">Click <strong class="ph b">Save</strong>.</li>
<li class="li">If the SSO configuration is inactive, <a class="xref" href="#topic_vzw_tbz_5sb">activate it</a> by assigning it to team members or end
users.</li>
</ol>
</div>
</div>
<div aria-labelledby="ariaid-title7" class="topic nested1" id="topic_tq5_jvf_2yb">
<h2 class="title topictitle2" id="ariaid-title7">Deleting SSO configurations</h2>
<div class="body">
<p class="p">You can delete inactive SSO configurations.</p>
<p class="p"><strong class="ph b">To delete an SSO configuration</strong></p>
<ol class="ol" id="topic_tq5_jvf_2yb__ol_nqy_qvf_2yb">
<li class="li"><span class="ph">In <a class="xref" href="https://support.zendesk.com/hc/en-us/articles/4581766374554#topic_hfg_dyz_1hb" target="_blank">Admin Center</a>, click <img class="image" id="topic_tq5_jvf_2yb__d9e323" src="https://zen-marketing-documentation.s3.amazonaws.com/docs/en/ac_account_icon.png">
<strong class="ph b">Account</strong> in the sidebar, then select <strong class="ph b">Security &gt; Single sign-on</strong>.</span></li>
<li class="li">If the configuration you want to delete is active, deactivate it first. See
<a class="xref" href="#topic_vzw_tbz_5sb">Activating or deactivating SSO configurations</a>.</li>
<li class="li">Click the option menu icon (<img class="image" id="topic_tq5_jvf_2yb__image_xhn_cyf_2yb" src="https://zen-marketing-documentation.s3.amazonaws.com/docs/en/uc_options_icon.png">) and select <strong class="ph b">Delete</strong> for the SSO configuration
you want to delete.</li>
</ol>
</div>
</div>
<script id="docs-schema-markup" type="application/ld+json">{
"@context": "https://schema.org",
"@type": "TechArticle",
"@id": "https://support.zendesk.com/hc/en-us/articles/4408882188570-Managing-single-sign-on-SSO-configurations",
"url": "https://support.zendesk.com/hc/en-us/articles/4408882188570-Managing-single-sign-on-SSO-configurations",
"headline": "Managing single sign-on (SSO) configurations",
"description": "You can manage multiple single sign-on (SSO) configurations by viewing, editing, activating, setting primary, adding sign-in buttons, and deleting them through the Admin Center's security settings.",
"articleSection": "User sign-in",
"datePublished": "2021-10-16T16:04:35+00:00",
"dateModified": "2026-04-23T16:01:41.410440+00:00",
"inLanguage": "en-US",
"mainEntityOfPage": {
"@type": "WebPage",
"@id": "https://support.zendesk.com/hc/en-us/articles/4408882188570-Managing-single-sign-on-SSO-configurations"
},
"author": {
"@type": "Organization",
"name": "Zendesk",
"url": "https://www.zendesk.com"
},
"publisher": {
"@type": "Organization",
"name": "Zendesk"
},
"isPartOf": {
"@type": "WebSite",
"name": "Zendesk Help",
"url": "https://support.zendesk.com/hc/en-us"
},
"about": {
"@type": "SoftwareApplication",
"name": "Zendesk"
}
}</script><script id="fast-path-script">
//<![CDATA[
const fast_path_style = document.createElement('style');
fast_path_style.innerHTML = `#article-body .fastpath{font-size:.9em;background-color:#f3f3f3;border:1px solid #d3d3d3;padding:10px 10px 8px;margin-bottom:16px}#article-body .fastpath::before{content:none!important}`;
document.head.appendChild(fast_path_style);
//]]>
</script><script id="ai-summary-script">
//<![CDATA[
const ai_summary_style = document.createElement('style');
ai_summary_style.innerHTML = `#styled-article-body{padding:0 0 0}#article-body #docs-ai-summary{background-color:#f3f3f3;border:1px solid #d3d3d3;padding:10px 10px 6px;margin-bottom:16px}#article-body #docs-ai-summary #docs-ai-summary-toggle{font-size:.9em;font-weight:700;margin-bottom:4px;cursor:pointer;display:flex;justify-content:space-between;align-items:center}#article-body #docs-ai-summary #docs-ai-summary-toggle #up-triangle{margin-left:auto;padding-right:10px;display:none}#article-body #docs-ai-summary #docs-ai-summary-toggle #down-triangle{margin-left:auto;padding-right:10px}#article-body #docs-ai-summary #docs-ai-summary-content{font-size:.9em;padding-left:25px;padding-right:25px;margin-bottom:12px}`;
document.head.appendChild(ai_summary_style);

const toggleAISummary = () => {
const summary = document.getElementById("docs-ai-summary-content");
const upTriangle = document.getElementById("up-triangle");
const downTriangle = document.getElementById("down-triangle");
if (summary.style.display === "none") {
summary.style.display = "block";
upTriangle.style.display = "none";
downTriangle.style.display = "inline";
} else {
summary.style.display = "none";
upTriangle.style.display = "inline";
downTriangle.style.display = "none";
}
};

document.getElementById("docs-ai-summary-toggle").addEventListener("click", toggleAISummary);
//]]>
</script>
</body>