Zabbix and authenticating towards enterprise applications in Azure
Hello!
I have a question about zabbix and the possible ways of authenticating to enterprise apps.
To give some context, i use Powershell towards Graph to retrieve various data or information from Azure AD (or Entra ID), Intune and so forth. The powershell scripts are hosted on Windows VM's that have Zabbix Agents running.
I am ofcourse aware of clientside authentication methods such as Certificate or Secrets. These type of methods are methods I would not like to use as they require either maintenace (renewal and so forth) and are unsafe (hardcoding secrets).
I want some sort of credential-less authentication.
I would be interested in for example using Federated credentials to authenticate. However for that you need a OIDC identity provider, which as far as i'm aware zabbix does not have? (Correct me if i'm wrong).
I am also aware of using Azure Automation (Triggering the script/data return by using a "secret webhook url" forexample). Is there any other efficient/smart methods you guys are using for your environment that you could recommend?
Thank you in advance.
I have a question about zabbix and the possible ways of authenticating to enterprise apps.
To give some context, i use Powershell towards Graph to retrieve various data or information from Azure AD (or Entra ID), Intune and so forth. The powershell scripts are hosted on Windows VM's that have Zabbix Agents running.
I am ofcourse aware of clientside authentication methods such as Certificate or Secrets. These type of methods are methods I would not like to use as they require either maintenace (renewal and so forth) and are unsafe (hardcoding secrets).
I want some sort of credential-less authentication.
I would be interested in for example using Federated credentials to authenticate. However for that you need a OIDC identity provider, which as far as i'm aware zabbix does not have? (Correct me if i'm wrong).
I am also aware of using Azure Automation (Triggering the script/data return by using a "secret webhook url" forexample). Is there any other efficient/smart methods you guys are using for your environment that you could recommend?
Thank you in advance.
.
Comment