Active Directory (AD) by Microsoft is a centralized and standardized system that automates network management of user data, security, and distributed resources. In other words, it allows the management and storage of information and provides authentication and authorization mechanisms. You can store information about your organization members, verify credentials, and define their access rights.
Active Directory single sign-on (SSO) with Zoho Desk allows you to leverage your existing corporate directories and authentication systems to authorize employee access to Zoho Desk. This article talks about configuring Active Directory single sign-on in your help desk using the Zoho Directory Sync.
Zoho Directory Sync is a secure and straightforward directory and password synchronization tool that syncs users and their passwords in Active Directory (AD) with Zoho accounts. This way, you can bring all your employees into Zoho Desk as agents without being prompted to enter separate sign-in credentials.
Setting up Zoho Directory Sync
- Go to https://directory.zoho.com/
- Sign in using your Zoho Desk credentials.
- You will be taken to the My Apps tab on signing in.
- If not, you will need to create a Zoho Directory account.
To create an account, enter your company name and then click Create Account.
- Click Admin Panel in the left menu, and select Applications.
- Click Add Application on the Applications Home page.
- Click Add corresponding to Zoho Desk on the products list page.
- You can view the Zoho Desk account you belong to.
- Select the account and then click Next.
- Click Yes, Add.
The Zoho Desk account and agents will be associated with this Zoho Directory organization. - Click OK to complete the association.
Now that you have associated with your Zoho Desk account, you must configure Active Directory authentication for this organization. This way, you can synchronize your Active Directory users with Zoho Directory. Since setting up and installing AD is beyond this guide's scope, click the Active Directory tab from inside Zoho Directory for detailed instructions.
Managing Zoho Desk Users
Once you have synced your AD users, you can perform all user provisioning activities like adding new agents, managing existing agents, etc., from inside Zoho Directory.
Setting IP Restrictions
If you frequently work with sensitive data, you can set up an allowed IP address range for your organization. Once configured, your users can only access your account from that particular IP address. It will block any unsolicited access attempts from any other IP address.
To configure allowed IPs:
- Go to https://directory.zoho.com/
- Sign in using your Zoho Desk credentials.
- You will be taken to the My Apps tab on signing in.
- Click Admin Panel on the left pane and then click Security.
- On the Security Policies page, Default Policy is selected by default.
- Click on the Allowed IPs tab and then click Add IP address.
- On the Add IP Address pop-up, you can either add a static IP or set an IP range.
- Once you've done this, click Add.
All further logins will be allowed only from the configured IP addresses.
Note:
- Configuring allowed IPs for the Default Policy will impact all users irrespective of their applications. You can set up a more granular restriction by adding a new security policy that applies to a particular group of users.
It is the responsibility of the data administrator to provide requisite permissions to their agents.