Overview

This guide details the necessary steps to establish SSO for Deskpro using BeanLogin.

The guide assumes that you already have an existing Deskpro subscription with Admin privileges to enable SAML.

SSO Configuration in BeanLogin

Below are the steps involved in configuration of SSO for Deskpro with BeanLogin.

1. Login to BeanLogin as an Administrator.
2. Navigate to Administration >> Access Management >> Corporate Apps.
3. Click New.
4. Select Deskpro from the list of apps and click it will give option whether to add as password-vault/SAML based on choice select the proper option and click on Add Selected Apps. It will add apps under corporate section with status as inactive.
5. Click Deskpro app from Corporate Apps section and open in edit mode and enter your domain name and keep note of App URL and Entity Id.
6. Go to Identity Management ->Click Custom User Fields and Add email feild and select this feild in corp edit mode for SAML response.
7. email field will have the user mail address.
8. Submit.

SSO Configuration in Deskpro

1. 1. Sign in to https://{your_domain}.deskpro.com with your organization’s Deskpro administrator account.
   2. From the Deskpro home page, click the Settings icon from left Menu. Expand the Agents and click on Auth & SSO.                                         
   3. Click on SAML Authentication link.                                              
   4. It will open the Right hand panel for SAML configuration.     
   5. In the SSO: Single Sign On URL field, enter the SSO URL as below, where EntityID is what you copied in Step5 when configuring SSO within BeanLogin.                                                                                                                                            https://host_name/Federation/SAML2SSO.aspx?idpid=xxxxxx-xxxxxx-xxxxxx-xxxxxx host_name is the host name of BeanLogin site.
   6. In the x.509 Certificate field, paste the certificate you downloaded in Step 1. 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
   7. Click Test Settings to verify configuration is correct.
   8. Click Enabled checkbox.
   9. Click Save.

Provisioning Configuration in BeanLogin

You can enable the provisioning from the two places

1. From Corporate App Edit where you have last step as Provisioning.
2. From Identity Management -> Endpoint Provisioning Section.

Once you enabled the provisioning don’t change any other value from page. Get your API key from DeskPro and enter it into API Key text box.