// Used for SAML authentication.
// Uncomment to override the default paths to SP private key, SP and IdP X.509 certificates, and to set extra settings.
$SSO['SP_KEY'] = 'conf/certs/sp.key';
$SSO['SP_CERT'] = 'conf/certs/sp.crt';
$SSO['IDP_CERT'] = 'conf/certs/idp.crt';
$SSO['SETTINGS'] = [ 'strict' => false, 'use_proxy_headers' => true, 'baseurl' => "http://zabbix.example.com/zabbix" ];

https://www.zabbix.com/documentation/current/en/manual/web_interface/frontend_sections/users/authentication/saml 1. этот скрипт создаст 3 файла, положить их в /usr/share/zabbix/conf/certs 2. Поправить /etc/zabbix/web/zabbix.conf.php: ``` // Used for SAML authentication. // Uncomment to override the default paths to SP private key, SP and IdP X.509 certificates, and to set extra settings. $SSO['SP_KEY'] = 'conf/certs/sp.key'; $SSO['SP_CERT'] = 'conf/certs/sp.crt'; $SSO['IDP_CERT'] = 'conf/certs/idp.crt'; $SSO['SETTINGS'] = [ 'strict' => false, 'use_proxy_headers' => true, 'baseurl' => "http://zabbix.example.com/zabbix" ]; ``` Заменить baseurl на свой URL. use_proxy_headers если за reverse proxy. 3. Настроить SAML в Zabbix: