I'm unable to make it work in a stable way. Sometimes works, sometimes don't.
After reading this two tutorials:
- https://support.freshdesk.com/support/solutions/articles/217630-single-sign-on-using-saml-auth0
- https://auth0.com/docs/protocols/saml/saml-apps/freshdesk
{
"audience": "https://myteam.freshdesk.com",
"mappings": {
"email": "Email",
"given_name": "User.FirstName",
"family_name": "User.LastName"
},
"nameIdentifierFormat": "urn:oasis:namesSAML:2.0:nameid-format:emailAddress",
"nameIdentifierProbes": [
"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"
],
"signatureAlgorithm": "rsa-sha256",
"digestAlgorithm": "sha256",
"lifetimeInSeconds": 3600,
"signResponse": true,
"createUpnClaim": false,
"passthroughClaimsWithNoMapping": false,
"mapUnknownClaimsAsIs": false,
"mapIdentities": false
}
Application Callback URL: https://myteam.freshdesk.com/login/saml (also added to Allowed Callback URLs)
Also, I added fingerprints in Freshdesk admin, and like I said, sometimes works ok but most of the cases, don't.
What I'm missing?