Webmail authenticate via 3rd party SAML

[nicholascmg]

Is it possible for Zimbra webmail to authenticate against 3rd party SAML provider then map user accounts on Zimbra server?

If so, how is this done?

[DualBoot]

Hello,

it is not native with Zimbra. You need to use for example Apache with mod_shib and redirect Zimbra login to this Apache.

Regards,

[L. Mark Stone]

Zimbra ships with saml middleware for two providers.

There are READMEs in the file system along with the appropriate jar files.

There is also a very dated wiki that describes the SAML authentication process in Zimbra.

Mark

[DualBoot]

Yes you're right Mark, but the readme is very light.
For example does it support WAYF ? Is it multi domain ?
Seems to be unclear.

[L. Mark Stone]

Yes you're right Mark, but the readme is very light.
For example does it support WAYF ? Is it multi domain ?
Seems to be unclear.

I agree on the lightness of the documentation, and I regret that I am not a SAML expert so I cannot answer your question. I do know that Zimbra Support has assisted with a number of large SAML deployments, so if it is a Network Edition deployment you are entitled to Support for help.

Mark

[nicholascmg]

There is very limited documentation, from what I see currently.

Any pointers when the SSO server received following error
Unparseable date: "2018-10-13T10:01:37Z"