Skip to main content
Solved

Can you set the secondary email for SSO


M.th
Contributor
Forum|alt.badge.img
  • Contributor
  • 3 replies

Our organization has different email addresses and AzureAD UPNs.
For example: UPN=name@example.com,  mail=name@example2.com

At this time, when we create a request via email, the SSO account is not tied to the ticket.
Freshdesk allows to define multiple email addresses for customer field.

Can I link multiple email addresses in SAML?

Best answer by Sujitha Dhanaseelan

Greetings @M.th. We appreciate your reaching out to us.

Please note that Freshdesk only allows for one email address per agent. Therefore, it is not possible to have multiple emails for a user in SSO configuration.

However, we suggest considering the following scenario: if there are two emails, A and B, and A is the agent email, you can ensure that the email address A is always passed in claims in the SSO call, regardless of whether the user logs in via A or B. This approach may help you achieve the desired outcome of having multiple emails for a user at the SSO end. 

Kindly drop a message here for any queries.

 

Best regards, 

Sujitha.

View original
Did this topic help you find an answer to your question?

4 replies

Sujitha Dhanaseelan
Community Manager
Forum|alt.badge.img+6

Greetings @M.th. We appreciate your reaching out to us.

Please note that Freshdesk only allows for one email address per agent. Therefore, it is not possible to have multiple emails for a user in SSO configuration.

However, we suggest considering the following scenario: if there are two emails, A and B, and A is the agent email, you can ensure that the email address A is always passed in claims in the SSO call, regardless of whether the user logs in via A or B. This approach may help you achieve the desired outcome of having multiple emails for a user at the SSO end. 

Kindly drop a message here for any queries.

 

Best regards, 

Sujitha.


  • Community Debut
  • 3 replies
  • May 28, 2024

If your requestors are signing in via SSO with their UPN but e-mail generated tickets are from an alternate address where their upn and mail AD values are different, you could map their mail attribute to their Requestor accounts Secondary e-mail address field.


M.th
Contributor
Forum|alt.badge.img
  • Author
  • Contributor
  • 3 replies
  • May 28, 2024

Thanks for the advice.
> their Requestor accounts Secondary e-mail address field.

I don't know what attribute of Freshdesk to map the AzureAD mail field to, and it doesn't work properly.


  • Community Debut
  • 3 replies
  • May 28, 2024

If you’re utilizing SCIM integration within AzureAD you can map [mail] to [urn:ietf:params:scim:schemas:extension:freshservice:2.0:User:_secondaryEmail]

 

Alternatively, if some users [mail] and [upn] match you will receive errors as the secondary e-mail can’t be the same as the accounts primary e-mail, in which case you would map an expression of [IIF([mail]=[userPrincipalName], "", [mail])]

 

Hope this helps!


Reply