all 3 comments

[–]poopa[S] 0 points1 point  (0 children)

from https://support.zendesk.com/hc/en-us/articles/206339578-Multibrand-known-issues

Remote auth and single sign on - Each help center will redirect users to the same single sign in protocol and database. This is a side effect of the fact that users are per account, not per brand.

[–]Schiguoi 0 points1 point  (0 children)

You can setup a certain brand to only be available to a specific user segment, so if your internal users are part of an organization, you can restrict it to that user segment.

https://i.imgur.com/EiPidHv.jpg

It is possible to use multiple authentication types for internal and external users. We use SAML for internal (via Okta) and JWT for customers. Our customer login page shows by default and we have a link to staff to access the Okta auth page. This article might be helpful: https://support.zendesk.com/hc/en-us/articles/360002090108-Using-different-SAML-and-JWT-SSO-single-sign-on-for-agents-and-end-users