Before you start
- A Zendesk subdomain and agent access.
Step-by-step
- 1
Enter your subdomain
Integrations → Zendesk → Connect, then enter your Zendesk subdomain (the part before .zendesk.com).
- 2
Authorize with Zendesk
Click "Continue with Zendesk" to authorize the read/write scopes on your instance. An API-token fallback is still available under manual setup.
Security best practices
- The subdomain is validated as a Zendesk subdomain label to prevent request forgery.
- Prefer OAuth tokens over a static API token where your plan supports it.
- Credentials are encrypted at rest with AES-256-GCM — they are never stored in plain text.
- Only organization owners and admins can create or modify a connection.
- Prefer OAuth where available: it issues short-lived, scoped, revocable tokens instead of long-lived secrets.
- When you must use a token, create a fine-grained, least-privilege token and rotate it periodically.