SAML: The parameter <username> not found in attributes.

[skrause]

Hi,

We are setting up a POC environment to test and see if Zabbix can be a viable alternative/replacement for some of our existing monitoring tools. As part of this evaluation we are wanting to use SAML SSO and we have configured the system (7.0.2 LTS ) to use our SAML provider and no matter what attribute we use we get the error message "You are not logged in. The parameter "<chosenattribute>" is not found in attributes."

We have tried this with several different attributes being sent from the IdP both with their friendly name and their oid identifier with no luck. Our IdP administrators see no problems with the authentication requests, they see the incoming request, a successful auth, and a response sent to the zabbix server.

Is there a log somewhere that we can look at to see more detailed information about how zabbix is handling the login responses?

Thanks!

[Markku]

Does this thread help you?

https://www.zabbix.com/forum/zabbix-cookbook/421153-zabbix-saml-with-azure-ad?p=432027#post432027

Markku

[skrause]

Markku,

That thread is one of the ones I looked at before but the only thing that is different is that I haven't set a specific "custom attribute" for this application, I am using built in core attributes in SAML (ie: mail) or some pre-configured Optional (custom for our organization's directory structure) attributes available on our IdP that maps to fields in the backend directory.

Based on the Zabbix instructions for generic SAML, Okta, Azure, and OneLogin, the attribute you create on your SAML implementation just needs to be the same name as the one that is entered into the Zabbix settings (the pages have different examples).

It would be really helpful to see what zabbix is parsing out of the auth response in a log or a debug somewhere.