Configuring provisioning for Zendesk

Use this task to provision users from Verify to a Zendesk application.

Before you begin

You need API keys that are generated from Zendesk with Read/write access. You need the following parameters to configure user provisioning in Verify.
  • Team Domain
  • Unique identifier
  • Client secret
  • Username
  • Password

About this task

Provisioning provides the following features.
Create new users
New users that are created through Verify are also created in the Zendesk application.
Delete users
Deactivating the user or disabling the user's access to the application through Verify deletes the user in the Zendesk application.
Modify user profile
Updates made to the user's profile through Verify are pushed to the third-party application.
User suspend and restore
Suspending a user through Verify deactivates the user and restoring the user through Verify activates the user in the Zendesk application.
User synchronization and remediation
The Zendesk application supports user synchronization, remediation, and group synchronization features.

User synchronization fetches all the target application users in Verify and matches the fetched users with users in Verify. The adoption policy that is defined on the application specifies the matching attributes for adoption of the reconciled users.

Remediation policy can be configured to remediate user accounts with attribute values that differ between Verify and the target application. Verify supports the following three remediation policies.
  • NONE - Do not remediate non-compliant accounts automatically.
  • ON_SV - Update Verify account attribute values with the target application values.
  • ON_TARGET - Update target application account attribute values with Verify values.
Group synchronization fetches all the target application groups in Verify.
Note: Currently, Verify group synchronization does not support to fetch multiple groups with same name.
Fine grained entitlement
Fine grained entitlement is supported for the Zendesk application. Synchronization fetches all Zendesk application groups. Users can be added to or removed from groups.
Note: Zendesk only supports agent type of users to be added or removed from the groups.

Procedure

  1. Log in as an admin user to your Zendesk account by using the following URL
    https://<Zendesk Team Domain>.zendesk.com
  2. Navigate to Admin > CHANNELS > API > OAuth Clients.
  3. In the All Oauth Clients section, click Add OAuth client.
  4. In the Create a new OAuth client section, specify the Client name and Unique identifier.
  5. Click Save.
  6. Copy the Client Secret that is generated.
  7. Note the following parameters that are required to configure provisioning in Verify.
    • Team Domain
    • Unique identifier
    • Client secret
    • Username
    • Password