[ZBX-24319] SSO Doesn't work with Windows Hello Created: 2024 Apr 05  Updated: 2025 Feb 24

Status: Confirmed
Project: ZABBIX BUGS AND ISSUES
Component/s: Frontend (F)
Affects Version/s: 6.0.28, 6.4.13, 7.0.0beta2
Fix Version/s: None

Type: Problem report Priority: Major
Reporter: Micah Dehkordy Assignee: Zabbix Development Team
Resolution: Unresolved Votes: 1
Labels: sso
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Attachments: PNG File image-2024-04-05-12-16-52-772.png     PNG File image.png    

 Description   

Recently we have activated Windows Hello on our laptops and we started receiving the following error when using SSO in Edge: "AADSTS75011: Authentication method 'X509, MultiFactor, X509Device' by which the user authenticated with the service doesn't match requested authentication method 'Password, ProtectedTransport'. Contact the Zabbix SSO application owner."

This error does not occur in private browsing and in Chrome.

After further inspection it is a known issue that can be fixed by the below picture

Please make the above changes so Edge SSO works with Windows Hello.

Thanks,

Please let me know if you need any further information



 Comments   
Comment by Micah Dehkordy [ 2024 Jul 10 ]

Hi, 

We have upgraded to version 7.0.0 and still getting this error.

Is there any update on a fix?

Thanks,

Comment by Dimitri Bellini [ 2025 Jan 14 ]

Hi DevTeam,
we have a customer with the same issue, there are some updates regarding this issue?

Thanks

Comment by Dimitri Bellini [ 2025 Feb 20 ]

Hi Zabbix Team,

as reported on this post "https://www.zabbix.com/forum/zabbix-help/476520-zaabix-saml-sign-in-problem"

To solve the issues with Biometric password or passwordless login, we need to modify the file "/usr/share/zabbix/vendor/onelogin/php-saml/src/Saml2/AuthnRequest.php"
from PasswordProtectedTransport to "unspecified" (urnasis:names:tc:SAML:2.0:ac:classes:unspecified)

If this change is correct, please add this sggestion to the official Zabbix documentation.
Thanks so much

Generated at Fri Apr 18 23:55:25 EEST 2025 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.