Skip to main content
POST
Mint a Zendesk JWT SSO token for the caller

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/json

Request body for POST /zendesk/login.

return_to
string

The Zendesk Help Center (or agent interface) URL to land on after authentication. Must be HTTPS on an allowlisted domain (Fireblocks or Dynamic) or the Dynamic Zendesk tenant. Defaults to the configured Help Center URL when omitted.

Response

Signed JWT + target for the caller to form-POST.

Response from POST /zendesk/login. The caller auto-submits a browser form POST of jwt and return_to to post_url to complete Zendesk JWT SSO — the token must never be sent via a GET/redirect, only a same-page form POST.

jwt
string
required

Signed HS256 JWT for Zendesk JWT SSO (iat, exp, jti, email, name, external_id claims).

post_url
string
required

Zendesk's JWT ingestion endpoint the caller must form-POST to.

return_to
string
required

Resolved return_to (echoes the request value, or the default Help Center URL).

Last modified on July 22, 2026