--- title: "Require agents to sign in Zendesk" slug: "require-agents-to-sign-in-zendesk" updated: 2026-11-02T07:24:38Z published: 2026-11-02T07:24:38Z canonical: "docs.document360.com/require-agents-to-sign-in-zendesk" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.document360.com/llms.txt > Use this file to discover all available pages before exploring further. # Require agents to sign in Zendesk By default, all agents who use the Document360 app in Zendesk see the same knowledge base content. The app connects with one shared token for your project, so it doesn't know which agent is using it. When you require agents to sign in, each agent signs in to the app with their own Document360 account. They see only the content their account can access, and their searches are linked to their account. You can also turn on silent agent sign-in. Agents whose Zendesk email address matches their Document360 email address can then sign in with one click, without entering a password. --- ## When to require agents to sign in - Your knowledge base has workspaces, languages, or categories that only some agents should see. - You want Eddy AI search analytics to show which agent ran each query. - Your agents already have Document360 accounts, or you can add them as readers. If you don't want to add Document360 accounts for your agents, keep this setting disabled. The app continues to work with the project's Document360 API token. --- ## Before you begin - You need the **Owner** or **Admin** role in your Document360 project. - The Document360 app must already be installed and connected in Zendesk. See [Set up the Document360 app for Zendesk](https://docs.document360.com/docs/set-up-document360-for-zendesk). - Your Zendesk account must use the latest version of the Document360 app. Older versions don't work while this setting is enabled. - Each agent needs a Document360 user account or reader account in the project. Reviewer accounts cannot sign in to the app. - To use silent agent sign-in, you need an account that has admin access to both Document360 and Zendesk. --- ## What agents can access | Account type | What the agent can do in the Document360 app | | --- | --- | | User | Search, link, and insert content allowed by their workspace, language, and category access. Create articles and categories if their content role allows it. | | Reader | Search, link, and insert published content allowed by their content access. Readers cannot see drafts, hidden articles, or private notes. The **Create** option is hidden for them. | | Reviewer | Cannot sign in to the app. | Agents can sign in with their Document360 credentials or through your project's SSO configuration. --- ## Require agents to sign in 1. In the Knowledge base portal, navigate to **Connections** () > **Extensions** () in the left navigation bar. 2. Find **Zendesk** and click **Setup**. The **Zendesk configuration** page opens. 3. In the **Generate API token** setting, click **Modify**. The **Connect with Zendesk** dialog appears. ![Zendesk configuration page showing API token management and federated search setup options under Extensions.](https://cdn.document360.io/860f9f88-412e-4570-8222-d5bf2f4b7dd1/Images/Documentation/generate-api-token-modify.png) 1. Select the **Require agents to sign in to Document360** checkbox. 2. Click **Save**. ![Connect with Zendesk dialog showing the Require agents to sign in to Document360 checkbox.](https://cdn.document360.io/860f9f88-412e-4570-8222-d5bf2f4b7dd1/Images/Documentation/require-agents-tosigh-in.png) The next time agents open the Document360 app in a ticket, they see a sign-in screen. For the agent steps, see [Sign in to the Document360 app](https://docs.document360.com/docs/use-document360-in-zendesk#sign-in-to-the-document360-app). To stop requiring sign-in, clear the **Require agents to sign in to Document360** checkbox and click **Save**. NOTE This setting is disabled by default. Existing installations keep working with the project's Document360 API token until you enable it. --- ## Sign agents in automatically With silent agent sign-in, agents still click **Sign in** in the Document360 app, but they aren't asked for a password or any confirmation when the verified email address of their Zendesk account matches their Document360 account. Agents whose email addresses don't match sign in with their Document360 credentials. To turn on silent agent sign-in, 1. Open the **Connect with Zendesk** dialog as described in [Require agents to sign in](/docs/require-agents-to-sign-in-zendesk#require-agents-to-sign-in). 2. Make sure the **Require agents to sign in to Document360** checkbox is selected. The **Silent agent sign-in** section appears below it. 3. In the **Zendesk subdomain** field, enter your Zendesk subdomain. For example, for `acme.zendesk.com`, enter `acme`. 4. Click **Connect**. A Zendesk window opens. 5. Sign in with an account that has admin access to both Document360 and Zendesk, and approve access. The connection is saved as soon as you approve it. The **Silent agent sign-in** section shows **Connected to** your Zendesk account and the admin who approved it. ![Silent agent sign-in section showing the connected Zendesk account and the Disconnect option.](https://cdn.document360.io/860f9f88-412e-4570-8222-d5bf2f4b7dd1/Images/Documentation/silent-agen-sign-in-conenct.png) IMPORTANT Zendesk admins can change agent email addresses in Zendesk. Connect only a Zendesk account whose admins you trust, because a changed email address could sign an agent in as a different Document360 user. To turn off silent agent sign-in, click **Disconnect** in the **Silent agent sign-in** section. The connection is removed immediately, without a confirmation prompt, and agents then sign in with their Document360 credentials. --- ## How agent sessions work - Agents stay signed in when they switch between tickets. - When you remove a user or reader from the project, their session in the app ends automatically. - When you refresh the Document360 API token on the Zendesk configuration page, every agent session in the project ends. Agents must sign in again. - Each search and Eddy AI query is linked to the signed-in account in [Eddy AI search analytics](https://docs.document360.com/docs/eddy-ai-search-analytics). If the **Anonymize reader information** setting is enabled, reader names and email addresses are hidden. --- ## FAQ **Do I need to require agents to sign in?** No. The setting is optional and disabled by default. Enable it when agents should see only the content their own Document360 account can access, or when you want to see which agent ran each search. **Why is an agent asked for a password even though silent agent sign-in is connected?** Silent agent sign-in works only when the agent's verified Zendesk email address matches their Document360 email address. If the addresses don't match, the agent signs in with their Document360 credentials. **Why can't a reviewer sign in to the app?** Reviewer accounts are not supported in the Document360 app for Zendesk. To give a reviewer access, convert the account to a reader or a user. For steps, read [Convert reviewer to reader](https://docs.document360.com/docs/convert-reviewer-to-reader). **Why were all agents signed out of the app?** The Document360 API token was refreshed on the Zendesk configuration page. Refreshing the token ends every agent session in the project. Agents must sign in again the next time they open the app. **What happens if an agent doesn't have a Document360 account?** The agent sees the sign-in screen but cannot use the app, even if silent agent sign-in is connected. Ask a project owner or admin to add the agent to the project as a user or reader. The agent can then sign in.