Zabbix 5 (LTS) ans Server 2019 ADFS Configuration

[JMAIV]

Hi All,

We have migrated our Zabbix 3 server to a new Zabbix 5 server. because Zabbix 5 supports SAML, I figured I'd give it a go...
Yet it seems to be a bit of a challange to me.

my current config in Zabbix:




the error message:




I've tried several configurations. Altering the username attribute to just about anything. but i can't find a way to get it work.
Any ssuggestions on how to debug this?

thanks!!

[JMAIV]

anyone with a spare minute or to?

[dhellstern]

The SAML document returned by ADFS is missing an assertion containing the username (or it may have one, but with a different name). Make sure the ADFS server is adding an assertion containing the username, with a matching name in Zabbix. Then, try to capture a request and extract the SAML assertion, decode it (using something like CyberChef), and see what assertions it contains.

[emilien.henry]

Hey,

You should map UPN as exiting claim and Client ID (and the what you want for your active directory attribute) on AD FS.

Use http://schemas.xmlsoap.org/ws/2005/0...ity/claims/upn as Username attribute in Zabbix.

[JMAIV]

thank you for your suggestions, sorry it's been a while. I will try this and report back.