SAML SSO Not working with ADFS

[srdev]

Hi,

We manage to make working SAML authentication between Zabbix 7.2 and our ADFS but the SSO doesn't work, we need to enter the crendential for each session

JIT provisioning is working with matching group but no SSO

Our Zabbix configuration



Is the a specific parameter to implement somewhere, maybe in zabbix.conf.php ?

Thanks

[cyber]

we do not use JIT... but rest of it is pretty similar, except Username attribute is just "username"... You also seem to have all the rest there.. http and ldap configs ... I dont think it should all be used at once...

[srdev]

Hi Cyber,

Thanks, we just find the solution

There is extra configuration to implement in /etc/zabbix/web/zabbix.conf.php
$SSO['SETTINGS'] = [
'security' => [
'requestedAuthnContext' => [
'urnasis:names:tc:SAML:2.0:ac:classes:Kerberos',
],
'requestedAuthnContextComparison' => 'exact'
]
];

Thanks