<?php | |
define('FRESHDESK_SHARED_SECRET','____Place your Single Sign On Shared Secret here_____'); | |
define('FRESHDESK_BASE_URL','http://{{your-account}}.freshdesk.com/'); //With Trailing slashes | |
function getSSOUrl($strName, $strEmail) { | |
$timestamp = time(); | |
$to_be_hashed = $strName . FRESHDESK_SHARED_SECRET . $strEmail . $timestamp; | |
$hash = hash_hmac('md5', $to_be_hashed, FRESHDESK_SHARED_SECRET); | |
return FRESHDESK_BASE_URL."login/sso/?name=".urlencode($strName)."&email=".urlencode($strEmail)."×tamp=".$timestamp."&hash=".$hash; | |
} | |
header("Location: ".getSSOUrl("User's Name","username@thecompany.com")); |
This comment has been minimized.
This comment has been minimized.
@barryokane Thanks a lot for your effort. |
This comment has been minimized.
This comment has been minimized.
One function PHP sample: https://gist.github.com/4209441 |
This comment has been minimized.
This comment has been minimized.
Here's a Node.js version: https://gist.github.com/derekseymour/26a6fe573c1274642976 |
This comment has been minimized.
This comment has been minimized.
Congratulations! But to me the code for NodeJS does not work when the name contains accent. it happens to other languages? |
This comment has been minimized.
This comment has been minimized.
Hi, i am fresh php programming developer, how to do this SSO login ? |
This comment has been minimized.
This comment has been minimized.
I am using the code above (albeit the original code from 2012) and it is working fine. However, I was contacted by Freshdesk today with the following... We noticed that you are using simple SSO and wanted to inform you that, moving forward, the format of your login details hash should be: Name, Shared secret key, Email address, and Timestamp (in that order). Please refer to this article and make the necessary changes ASAP. As this is an important security update, we will stop supporting the old hashes by Thursday (28 April 2016) at 11 PM PDT. Can you confirm your updated code conforms to the security update and if not, what changes need to take place to ensure it works prior to the above date? |
This comment has been minimized.
This comment has been minimized.
I'm going to have a wild guess that the following line needs to be updated... From: To: Basically just moving the |
This comment has been minimized.
This comment has been minimized.
I've updated my code to the latest revision from 4 Dec 2013 and made the amendment noted above and it still logs in as expected. Guess I'll find out tomorrow whether my users can still login or not and I'll post back here. |
This comment has been minimized.
This comment has been minimized.
@jonmc99 The URL doesn't need to be changed as URL parameters do not respect order. The only thing that I see that would need to be changed is:
Note: We're not using PHP for this solution, so this is untested, but it works in my brain ;-) |
This comment has been minimized.
This comment has been minimized.
@42degrees Thats the change that needs to be done. Thank you. @jonmc99 Sorry for the delay in updating this. I've changed the code, please let me know if it works or if you have any other issues with this. |
This comment has been minimized.
This comment has been minimized.
Thanks for the feedback. That change matches what Freshdesk support also said. I've updated my code and all tested to be working fine. Thanks for your assistance. Oddly, my very original code (your original revision) also still works! |
This comment has been minimized.
This comment has been minimized.
I am using this code but unable to login to freshdesk. Can someone help me. Thanks in advance. function getSSOUrl($strName, $strEmail) { function getHash($strName, $strEmail, $time) {
} |
This comment has been minimized.
This comment has been minimized.
I am facing a unique problem with this, the code works with email that do not consists of dot (.) before the @ sign. Thanks |
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
Its works |
This comment has been minimized.
This comment has been minimized.
An easier to read code with the help of PHP's
The whole code is in this fork: |
This comment has been minimized.
This comment has been minimized.
How do you guys handle a user's email address change scenario? |
This comment has been minimized.
Thanks for this. I created an ASP.Net c# version: https://gist.github.com/2718191