You could login to your Freshdesk account from your Freshdesk Portal, which would be available in the URL yourcompanyname.freshdesk.com. There, you would find the Login option at the top-right of the page.
This would take you to the login page from where you could use your login credentials - email address and password, to login.
The Single Sign-On capability in Freshdesk lets the users arriving at your support portal login with their credentials saved on your database.
This saves them the time and effort involved in creating a separate account for your support portal. You can also set up an
SSO mechanism to validate users trying to log into your portal for Freshdesk using a locally hosted script. These could be the users who already have an account in your web application or whose information you have stored in your internal application like ActiveDirectory.
Using Single Sign-On, your users could get automatically authenticated while logged in to your common Login option. For example, if you have a website or dashboard where your users login and would like to use the same to access Freshdesk, you could make use of Single Sign-On.
You could configure Single Sign-On within Freshdesk from under Admin-->Security and turning on "Single Sign-On". You could then choose between Simple or SAML SSO to proceed with the configuration.
While setting up an SSO, the users would have to login from a common login URL, to be authenticated using SSO. The Remote Login URL is that URL to which your users would be redirected when they hit the Login button on your portal after you have set up an SSO.
You would have to update this field with the common login URL, while setting up SSO for your Freshdesk Account.
Freshdesk makes use of HMAC MD5 encryption, while using SSO for login authentication.
The mandatory parameters that need to be passed during login are, name, secret hash, email, and time stamp - in that order.
While setting up SSO for your Freshdesk Account, you would enter a Fingerprint, which is a shared secret key to be used during login authentication.
The most common mistake that might cause this is the presence of blank spaces at the beginning and end of the fingerprint text under Admin-->Security. Please ensure that there are no spaces before or after the fingerprint.
To update the Fingerprint, you could login to your account using the URL domain.freshdesk.com/login/normal and by using your Freshdesk login credentials.
If the issue persists, please send an email to support@freshdesk.com and we'll help you out.
This error indicates an issue with the TimeStamp in the URL that is generated using SSO, after entering the login credentials. Please ensure that your servers are in-sync with the NTP server and give this another try.
If you continue to face issues, kindly write to support@freshdesk.com and one of our agents would get in contact with you to assist you further.
This error message denoting authentication failure would be because of an error in setting up the SSO. To analyse this, we would require the debug log. Please enter ?debug=1 at the end of the URL that is generated, to retrieve the debug log.
Also, please check the constructed URL after the login, to see if the Hash is generated or not.
If the issue persists, please send an email to support@freshdesk.com.
Please check if the agent who is logging in is using their email address which is part of the AD. Also, if they are a user on the AD, you would have to make sure if their user profile on the AD has permissions to use SSO. The email address from your AD is the parameter that Freshdesk checks while authenticating the login, to locate their profile on Freshdesk.
After every login with an SSO, Freshdesk will sync the name of the agents with the names in your SSO database. Hence, the names in Freshdesk would automatically be updated.
To fix this, please check how the names of the agents are configured on your SSO database.
Also, we support UTF-8 encoded special characters only; so if the name contains any unsupported special characters, we would change it to the English equivalent.
This would be because of an incorrect Remote Logout URL. If you have entered the login page of the portal as the Remote Logout URL, please have that modified and give this another try.
