How to Configure SAML 2.0 for DeskPRO

Contents

• Supported Features
• Configuration Steps
• Notes

---

Supported Features

The Okta/DeskPRO SAML integration currently supports the following features:

• IdP-initiated SSO
• SP-initiated SSO

For more information on the listed features, visit the Okta Glossary.

---

Configuration Steps

1. Sign in to DeskPRO as a user with administrator permissions.

2. Navigate to CRM > Auth & SSO.

3. Select the Okta Authentication application.
4. Enter the following (see screenshot at end of step for reference):

• Enabled?: Check Yes.

• External Key: Copy and paste the following:

  Sign into the Okta Admin dashboard to generate this value.

• Redirect Login URL: Copy and paste the following:

  Sign into the Okta Admin dashboard to generate this value.
• In Okta, below the button that opened these instructions is a link titled Identity Provider Metadata. Right click on that link and copy the link location. Paste it into the IDP Metadata Public Link field, as shown above.

• x509 Certificate: Copy and paste the following:

   Sign into the Okta Admin dashboard to generate this value. 

• Logout (SLO) URL: Copy and paste the following:

  Sign into the Okta Admin dashboard to generate this value.

• Optional: Enter any desired Login Button Text. This text is displayed on a button if the SSO method is "Disabled" or "Background" and allows users to initiate  OKTA by clicking it. Suggested text is shown below.

  OKTA

• Select the preferred SSO Method. There are three choices.

  • Disabled – manual login (clicking a button).
  • Automatic SSO – An SP-initiated redirect to Okta for authentication with SAML.
  • Background – An iframe opens in the background and silently logs the user in or refreshes the page if the user is already authenticated by Okta.
• Select Install App.


5. In Okta, select the Sign On tab for the DeskPRO app, then click Edit.

   • Scroll down to the ADVANCED SIGN-ON SETTINGS section.

6. Copy and paste the information from DeskPRO SAML Details section shown below to the Okta Sign On tab.

   

   1. In the DeskPRO window, copy the Post Back URL by selecting the Copy URL button. Paste this value into the corresponding field in the Okta window.
   2. In the DeskPRO window, copy the Recipient by selecting the Copy URL button. Paste this value into the corresponding field in the Okta window.
   3. In the DeskPRO window, copy the Audience Restriction by selecting the Copy URL button. Paste this value into the corresponding field in the Okta window.
7. In Okta, select Save.



8. Done!

---

Notes

The following SAML attributes are supported:

Name	Value
email	user.email
first_name	user.firstName
last_name	user.lastName
middleName	user.middleName
honorificPrefix	user.honorificPrefix
honorificSuffix	user.honorificSuffix
title	user.title
displayName	user.displayName
nickName	user.nickName
profileUrl	user.profileUrl
secondEmail	user.secondEmail
mobilePhone	user.mobilePhone
primaryPhone	user.primaryPhone
streetAddress	user.streetAddress
city	user.city
state	user.state
zipCode	user.zipCode
countryCode	user.countryCode
postalAddress	user.postalAddress
preferredLanguage	user.preferredLanguage
locale	user.locale
timezone	user.timezone
userType	user.userType
employeeNumber	user.employeeNumber
costCenter	user.costCenter
organization	user.organization
division	user.division
department	user.department
managerId	user.managerId
manager	user.manager

SP-initiated SSO

Usage of an SP-initiated flow is determined by the SSO Method setting, as described in the following table:

SSO Method	Usage
Disabled	From to the home page, select the button that displays the text you entered in step 10.
Automatic SSO	Navigate to the home page.
Background	From to the home page, select the button that displays the text you entered in step 10.