AD FS certificates

Question

Hello,
I am trying to set up single sign-on with Zabbix. The part I am stuck on is importing the certificates:

To use SAML authentication Zabbix should be configured in the following way:

1. Private key and certificate should be stored in the ui/conf/certs/, unless custom paths are provided in zabbix.conf.php.

By default, Zabbix will look in the following locations:

ui/conf/certs/sp.key - SP private key file
ui/conf/certs/sp.crt - SP cert file
ui/conf/certs/idp.crt - IDP cert file

How do I get these certificates from AD FS?
Thank you

Answer 1

For these two it is up to the SP owner to provide them.

ui/conf/certs/sp.key - SP private key file
ui/conf/certs/sp.crt - SP cert file

This one in in the federation metadata:

ui/conf/certs/idp.crt - IDP cert file

URL is https://<adfs URL>/FederationMetadata/2007-06/FederationMetadata.xml it is in base64 within the file.