generalSSO is a graphical interface for manually testing Single Sign-On (SSO) requests to Zendesk. The application makes no attempt to ensure that requests are correct (for troubleshooting it's at least as important to be able to construct invalid requests as it is to construct valid requests). The application supports JWT and SAML authentication strategies.

At a bare minimum, a JWT payload requires the following:

• Hostname
• Shared secret (from Settings > Security > SSO > JWT in Zendesk)
• IAT
• JTI
• Name
• Email

Zendesk documentation for JWT

Zendesk requires that the fingerprint of the certificate used to sign SAML assertions be entered under Settings > Security > SSO > JWT.

At a bare minimum, a SAML response should contain:

• Certificate
• Key
• Destination hostname
• IssueInstant
• Response ID
• NameID (email address)
• Givenname
• Surname

Zendesk documentation for SAML

See a live demo at https://generals.so. Don't use the demo to authenticate against production accounts!