Skip to main content
Answer

Do you need to manually add every user you want to be able to use SSO via Azure AD ?

  • October 22, 2021
  • 5 replies
  • 1231 views
G
Apprentice
Forum|alt.badge.img

Basically title, I can get SSO working with pre-existing freshworks users however it doesn’t work with users that only exist in Azure AD (“-insert user- cannot be logged in as this user is not part of this organization”). So am I missing something or do you need to add/import users even if they’re going to use their AD login ?

Best answer by Glavin Crasta

@Garchomped you can install the below app from Admin→ Apps and sync your users to Freshservice.

This is not mandatory and the user record would be created in Freshservice through SSO as well. Please check on Azure side if you have enabled all users to have access to Freshworks application through SSO. If not you would need to add the users to the application in Azure.

    manns

    5 replies

    G
    Forum|alt.badge.img+8
    • ggallaway
    • October 25, 2021

    I believe you would need to use the AD sync process to at least get the users in the system, then SSO handles the Authentication.

    manns
    G
    Apprentice
    Forum|alt.badge.img
    • Garchomped
    • Author
    • Apprentice
    • October 29, 2021

    How would you sync Azure AD users though ? I’m either braindead or can’t Google, I’ve been trying to find a solution to this for a week now without success.

    manns
    Glavin Crasta
    Active Contributor
    Forum|alt.badge.img+6
    • Glavin Crasta
    • Active Contributor
    • Answer
    • November 4, 2021

    @Garchomped you can install the below app from Admin→ Apps and sync your users to Freshservice.

    This is not mandatory and the user record would be created in Freshservice through SSO as well. Please check on Azure side if you have enabled all users to have access to Freshworks application through SSO. If not you would need to add the users to the application in Azure.

    Glavin Crasta
    manns
    G
    G
    Apprentice
    Forum|alt.badge.img
    • Garchomped
    • Author
    • Apprentice
    • November 22, 2021

    Sorry for the late reply but that really helped, thanks.

    manns
    MrLiquidBread
    Contributor
    Forum|alt.badge.img+1

    @Garchomped 

    I’ve set the FreshService Provisioning app up in my Azure AD tenant and when I try and test it by manually provisioning a test AAD user account that doesn’t exist in FreshService, I’m receiving an error (see below) about an employee_id field.  Did you receive that error too or did you run into any snags with getting this setup in your environment?

     

    Export details

     

    Failed to create User 'ittest@trilliumstaffing.com' in Freshservice


    Error code

    SystemForCrossDomainIdentityManagementServiceIncompatible

    Error message

    StatusCode: BadRequest Message: Processing of the HTTP request resulted in an exception. Please see the HTTP response returned by the 'Response' property of this exception for details. Web Response: {"schemas":["urn:ietf:params:scim:api:messages:2.0:Error"],"detail":[{"field":"employee_id","message":"It should be of type Integer","code":"missing_field"}]}

    manns
    Terms of UseAccessibility statement