Integrate Zendesk with Okta

To integrate this app with Okta, you need to enable API integration with Zendesk and choose which provisioning features to use. You can use schema discovery to add more attributes to a user profile.

Note:

Zendesk requires OAuth 2.0 for all third-party provisioning integrations. Okta uses a global OAuth client to securely connect to your Zendesk environment without storing your admin credentials. This change only applies to provisioning. SAML/OIDC single sign-on (SSO) is unaffected.

Before you begin

You have the admin role in Zendesk.
You have the org admin or app admin role in Okta.
You have integrated the Zendesk app in your org. See Add existing app integrations.

Zendesk OAuth permissions

When you authenticate, Zendesk prompts you to grant Okta access to your Zendesk account. Okta requires the following OAuth scopes to manage the provisioning lifecycle:

read: Allows Okta to read existing users, groups, and schema attributes.
users:write: Allows Okta to create, update, and deactivate users.
groups:write: Allows Okta to manage group memberships.

Enable API integration and choose provisioning features

In the Admin Console, go to Applications and Resources > Applications.
Select your Zendesk app integration.
Go to the Provisioning tab.
Note:
If your Zendesk integration was previously configured with an API token or username and password, you'll see a deprecation banner on this tab. Proceeding with the authentication steps below migrates your connection to OAuth 2.0. Your existing Basic Auth credentials remain as a fallback until you complete the authentication.
Click Configure API Integration, and then select Enable API integration.
Click Authenticate with Zendesk.
Sign in to your Zendesk admin account and approve the consent screen to grant Okta access.
Select which User Roles to Import. Choose either All Users or Only Admins and Agents.
Select Don't import suspended users if you want to ignore inactive users during import.
Select Import Groups to bring groups into Okta.
Optional. Click Test API Credentials to verify the connection.
Click Save.
Optional. Change the Okta to Zendesk provisioning settings:
1. Go to the Provisioning tab.
2. Select To App under Settings.
3. Select the provisioning features that you want to enable.
4. Click Save.

You can now assign users or groups to the Zendesk app integration.

Add more attributes to user profile

Zendesk supports schema discovery for adding attributes. Complete the following steps to add more attributes to the user profile in Okta.

In the Admin Console, go to Directory > Profile Editor .
Select the Apps filter, and then find and select your Zendesk app integration.
Review the current list of attributes. To add more attributes, click Add Attribute. A list of extended attributes appears.
Enter the information for the attribute that you want to add. Click Save or Save and Add Another if you want to add another attribute.

These new attributes are now available for import and push between Okta and Zendesk.