SSO freshdesk

[nicholab]

Hi has anyone manage to get SSO working with Freshdesk move to a new method I am now getting Error in processing saml response?

 

Thanks

[willtech]

What error you getting in the SAML response ?

 

If you are using Azure: https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/freshdesk-tutorial

[howartp]

We use SSO to Google from Freshdesk.

 

We do have to sign in twice for some reason - hit sign in with Google, sign in, then hit it again on the next page - but it works.

 

Peter

[thegavna]

Hi there,

 

I had an issue with this when I switched over... trying to remember what I did.

 

I believe I had to assign roles using custom policies https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-enterprise-app-role-management#:~:text=To%20assign%20the%20role%20to,mapping%20of%20the%20role%20claim. and then I had to sign the SAML response or something along those lines.

[nicholab]

Be great if they had a quick to follow guide that worked I now spent a day on this achieving nothing.

[HPlum78]

What is the actual error? (look at the sign in logs in Azure) have you installed saml trace on your browser (chrome/ chrome based and Firefox browsers) ? If not get it. Also setup claims xray so you can test and see how and what is leaving in the claim (Don't embellish the claim with more than is needed!) . Also test in an in private browser so you know that you are getting a fresh token.

 

I have migrated around 30 apps in the past few weeks but have no experience of freshdesk will take a look....

---

Edited May 27, 2021 by HPlum78

[nicholab]

On the freshworks logon page I am getting the following error Error in processing saml response

[kmount]

Working here fine with AzureAD and Conditional access, feel free to shout if you want to compare settings.

[Mr.Ben]

Same here, but I did end up going through support to get it going in the end (nothing about it was clear).

 

More frustrating is the new default page that has a separate login (which we don't use and can't use!

[HPlum78]

So my guess is that you are passing the Azure auth part of this and that error is being thrown by FD. Guess is it is what is in the claim is there no better app logs?