FreshDesk SAML Single Sign-On (SSO) | FreshDesk SSO Login with WordPress

FreshDesk SAML Single Sign-On (SSO) | FreshDesk SSO Login with WordPress


FreshDesk

FreshDesk SSO - Login using WordPress Users (WP as SAML IDP) Plugin enables Single Sign-On (SSO) login into FreshDesk using WordPress Login credentials. In this guide we will set up SAML Single Sign-On (SSO) with WordPress in FreshDesk by configuring FreshDesk as Service Provider (SP) and WordPress as an Identity Provider (IDP).

Pre-requisites: Download And Installation

To integrate the WordPress site as an Identity Provider, you will need to install the miniOrange Login using WordPress Users (WP as SAML IDP) plugin:

Guide to configure FreshDesk SSO Login with WordPress :

1. Configure FreshDesk as the Service Provider

  • Go to the WordPress IDP plugin, navigate to the IDP Metadata tab.
  • Here, you can find the Identity Provider Metadata URL /XML File or endpoints like IDP Entity ID, SAML Login URL, SAML Logout URL (Premium Feature), Certificate for SP configuration.
  • WordPress IDP Metadata - Freshdesk SSO Login with WordPress
  • Login into your Freshdesk site as an admin.
  • Navigate to the Security icon in the sidebar and select Agents & Employees tab.
  • Click on Default Login Methods.
  • Select Default Login Method - Freshdesk SSO Login with WordPress
  • Enable SSO Login.
  • Enable SSO - Freshdesk SSO Login with WordPress
  • To configure SSO choose SAML under IdP of your choice tab.
  • Choose IDP - Freshdesk SSO Login with WordPress
  • Download the Metadata File / Copy the Assertion Consumer Service (ACS) URL and Service Provider (SP) Entity ID this will be required to configure the Identity Provider.
  • Download Metdata file from IDP Plugin - Freshdesk SSO Login with WordPress
miniorange img Map information from IdP
  • Enter the following information from the IDP Metadata tab of the plugin.
  • Entity ID You can find this in IDP Metadata as SP-EntityID.
    SAML SSO URL You can find this in IDP Metadata as SAML Login URL.
    Signing Option You can select various signing options from the dropdown list.
    For now select Only Signed Assertions .
    Logout URL (optional) You can find this in IDP Metadata as SAML Logout URL.
    Security Certificate You can find this in IDP Metadata as Certificate .
    Configure SP by entering the IDP data - Freshdesk SSO Login with WordPress
  • Click on Configure SSO.

You have successfully configured Agent & Employees SSO for your Service Provider.

2. Configure WordPress as the Identity Provider

  • In the WordPress IDP plugin, navigate to the Service Provider tab and enter the values corresponding to the information from Freshdesk.
  • Service Provider Name Freshdesk
    SP Entity ID or Issuer Copy and Paste the SP Entity-ID from the Service Provider
    ACS URL Copy and Paste the ACS URL from the Service Provider
    NameID Format Unspecified
    Assertion Signed Checked
    Configure WordPress as IDP - Freshdesk SSO Login with WordPress
  • Click on the Save button to save your configuration.

3. Attribute Mapping (This is a Premium feature)

  • FreshDesk expects the SAML claims (information of a user at the time of SAML assertion) to be in the following format to update the profile.
  • FreshDesk Profile Attribute Expected SAML Claim format
    First Name "givenname", "FirstName", "User.FirstName", "username",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname"
    Last Name "surname", "LastName", "User.LastName",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname"
    Work Number "phone"
    Mobile Number "mobile"
    Company Name "company", "organization"
    Job title "title", "job_title"
miniorange img In WordPress
  • In the WordPress IDP plugin, navigate to the Attribute/Role Mapping tab.
  • In the User Attributes section, enter the following information and click Save.
  • Name User Meta Data
    FirstName first_name
    LastName last_name
  • In the Custom Attributes section, you can enter custom attributes and click Save.
  • Name Custom Attribute Value
    company eg. xyz.inc
    Attribute mapping - Freshdesk SSO Login with WordPress

4. Testing SSO

  • In the FreshDesk, click logout to verify the SAML configuration.
  • On the login page, you will notice a new option to login called Sign in with SSO.

  • Testing SSO - Freshdesk SSO Login with WordPress
  • On Clicking the button you would be redirected to the WordPress Login Screen. Enter valid credentials and click on Log in button.
  • Testing SSO - Freshdesk SSO Login with WordPress
Note: Please check if the user is assigned to your oraganisation.
  • If the user is not assigned to the organisation please follow the below step.
  • Navigate to the Users icon in the sidebar and click on Add User to assign access to the user for your organisation.

If you are able to successfully complete the authentication and log into Freshworks your configuration is successfully complete.

In this Guide, you have successfully integrated FreshDesk - SAML Single Sign-On (SSO) with plugin- Login using WordPress Users (WP as SAML IDP). Configuring FreshDesk as SP and WordPress as IDP. This solution ensures that you are ready to roll out secure Single Sign-On (SSO) access with SAML 2.0 Authentication into FreshDesk using WordPress login credentials.

Additional Resources

Why Our Customers choose miniOrange WordPress Single Sign-On (SSO) Solutions?


24/7 Support

miniOrange provides 24/7 support for all the Secure Identity Solutions. We ensure high quality support to meet your satisfaction.

Sign Up

Customer Reviews

See for yourself what our customers say about us.
 

Reviews

Extensive Setup Guides

Easy and precise step-by-step instructions and videos to help you configure within minutes.

Watch Demo


We offer Secure Identity Solutions for Single Sign-On, Two Factor Authentication, Adaptive MFA, Provisioning, and much more. Please contact us at

 +1 978 658 9387 (US) | +91 77966 99612 (India)   samlsupport@xecurify.com

Hello there!

Need Help? We are right here!

support
Contact miniOrange Support
success

Thanks for your inquiry.

If you dont hear from us within 24 hours, please feel free to send a follow up email to info@xecurify.com