SAML is not working properly

[dogfiregg]

Hi,

I set up the zabbix with docker image like down below

https://hub.docker.com/r/zabbix/zabbix-web-nginx-mysql

everything is working well except SAML.

Here's my configuration



and idp.crt attached into the zabbix-web container with file (tried with volumes : docker-compose and configMap : k8s and file creation : vi editor)

I was expecting that clicking the SAML button would redirect to the SSO URL. but It's not.
I got two errors like down below

• No permissions for system access.
  • I don't know what this mean.
  • Is that mean that I can not excute the index_sso.php which is made with root in the container?
  • but other files are all the root
• Invalid array settings: idp_cert_or_fingerprint_not_found_and_required

How can I solve above issue?
Thank you in advance!

[ravenlord]

Hi, I have the same problem, did you solve it?

[emnavarro02]

Hi,

I had this problem and managed to solve it.

In my case, the IDP certificates were stored in the wrong folder.

Moving the certificates from folder "/usr/share/zabbix/conf/certs/" to "/etc/zabbix/web/certs/" did the trick.

[sarang]

Hello dogfiregg and emnavarro02 I am using Zabbix 6.0 and experiencing same issue while configuring SSO. I added the idp.crt as well as self-signed cert and key to /etc/zabbix/web/certs/ but unable to get rid of this error. Can you please assist and provide solution.

[bmcgoang]

Hello, I know this thread is getting older now, but I'm experiencing the same issue as above. I only get th eline `idp_cert_or_fingerprint_not_found_and_required` when I try to access the SAML login link.

I have setup Zabbix in Docker using the docker compose for nginx alpine. Running seerver version 6.4.12.

I have placed the SAML cert and key (named sp.crt and sp.key respectively) in two locations with mapped volumes
1. /zbx_env/usr/share/zabbix/conf/certs/
2. /zbx_env/etc/zabbix/web/certs/

The IdP cert file is also in both of the locations above named idp.crt.

In the .env_web file I added the lines

ZBX_SSO_SP_KEY=/usr/share/zabbix/conf/certs/sp.key
ZBX_SSO_SP_CERT=/usr/share/zabbix/conf/certs/sp.crt
ZBX_SSO_IDP_CERT=/usr/share/zabbix/conf/certs/idp.crt

I've tried many variations of this setup at this point, and am still getting the error about the idp cert or fingerprint being invalid. I'd love to get this resolved. Maybe create some better documentation around what needs to happen when running in Docker.

Thanks in advance for any help,