Skip to main content

Multiple usersources

Authentication and SSO

You can install multiple authentication apps, or even multiple copies of the same app. You can only enable SSO (whether Background or Automatic) on one app at a time for agents, and one for users. The current SSO state is indicated with a badge in the list of apps.


If SSO is set up for users, agents going to the portal will be redirected to the SSO provider, even if it’s not set up for agents. To get around this, agents can go directly to /agent/ or /admin/ and log on from there.

If you have multiple authentication apps installed and have no Automatic SSO enabled, users/agents will be offered multiple login options.

For example, this is a portal where the user can log in with a DeskPRO account, via a company intranet (which could be implemented with SAML, JWT or database), or with a Google+ account.


The login options are displayed in three different ways.

  • Form: most apps use the same email address/password login form. This can be used to log in with
  • SSO button: some SSO apps in background mode (OneLogin setupSAML and JWT) will display a login button; the text is defined when you set up the app
  • Icon: Twitter, Facebook and Google authentication apps display their respective icons

DeskPRO authentication

By default, the only usersource on your helpdesk is the Deskpro account system.

If you don’t want your users/agents to be able to sign in with their Deskpro account at all, you can disable Deskpro authentication altogether.


Note that the “lost password”/”change password” functions on the portal only relate to Deskpro passwords, so they are not shown if the Deskpro usersource is disabled.


Be careful if you disable Deskpro authentication; make sure you can sign in with one of the alternative usersources.

If you accidentally lock yourself out and you are using On-Premise, see anchortext for how to log in again.

If you are on Cloud, contact

Authors list

First published: 24/03/2017

Last updated: Nov 23, 2017 by Paul Davies