Setting up ZenDesk for AWS SSO was a bit weird due to their requirements, but not that difficult in hindsight.

1. Copy the SSO Sign-in and Sing-out URLs to ZenDesk.
2. For the certificate fingerprint, download the AWS SSO certificate, open it, click Details tab, and look for Thumbprint at the bottom.
3. The Application ACS URL will be https://MYSUBDOMAIN.zendesk.com/access/saml
4. The Application SAML audience URL will be https://MYSUBDOMAIN.zendesk.com
5. The final step is add two custom attributes in the AWS configuration

• name = ${user:givenName}
• email = ${user:email}