-
Type:
Change Request
-
Resolution: Unresolved
-
Priority:
Trivial
-
None
-
Affects Version/s: None
-
Component/s: None
-
None
Zabbix can't support SAML authenticate via certificate. But SAML library uses zabbix can work via certificate.
Zabbix don't use standard configuration of SAML library. We must change in php code of ui/index_sso.php for enable SAML authenticate via certificate.
Change:
Find string ( #116 for version 7.2.11 )
'wantNameIdEncrypted' => (bool) $saml_settings['encrypt_nameid']
Replace to
'wantNameIdEncrypted' => (bool) $saml_settings['encrypt_nameid'], 'requestedAuthnContext' => array('urn:oasis:names:tc:SAML:2.0:ac:classes:Password', 'urn:oasis:names:tc:SAML:2.0:ac:classes:X509')