website/integrations: Update Zammad SAML Instructions#14774
Merged
tanberry merged 18 commits intogoauthentik:mainfrom Jun 2, 2025
Merged
website/integrations: Update Zammad SAML Instructions#14774tanberry merged 18 commits intogoauthentik:mainfrom
tanberry merged 18 commits intogoauthentik:mainfrom
Conversation
I just configured Zammad 6.4.1 to work with Authentik 2025.4.1. There seem to have been some changes since these instructions were written. The Name ID Format cannot be left blank. The SSO URL and the logout URL were incorrect. I was getting an Error 422 from Zammad until I turned on signing assertions, so I conclude that is required and I wrote instructions for that. I saw some discussion online elsewhere that the `----BEGIN` and `---END` lines should be removed. I tested it both ways and it worked both ways. I wrote the instructions to keep those lines in because it seemed simplest and most intuitive. Signed-off-by: Paco Hope <pacohope@users.noreply.github.com>
✅ Deploy Preview for authentik-docs ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
✅ Deploy Preview for authentik-storybook canceled.
|
dewi-tik
previously requested changes
May 29, 2025
Contributor
dewi-tik
left a comment
There was a problem hiding this comment.
Thanks for the contribution @pacohope. Appreciate it very much.
I've requested a few changes.
I also suspect that the property mappings aren't required and that the built-in authentik default SAML Mapping: Name and authentik default SAML Mapping: Email property mappings would be sufficient. authentik default SAML Mapping: Email could be used for NameID:
However I don't have a zammad instance to test this on at the moment.
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #14774 +/- ##
=======================================
Coverage 92.76% 92.76%
=======================================
Files 817 817
Lines 42197 42197
=======================================
Hits 39142 39142
Misses 3055 3055
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
Co-authored-by: Dewi Roberts <dewi@goauthentik.io> Signed-off-by: Paco Hope <pacohope@users.noreply.github.com>
Co-authored-by: Dewi Roberts <dewi@goauthentik.io> Signed-off-by: Paco Hope <pacohope@users.noreply.github.com>
Co-authored-by: Dewi Roberts <dewi@goauthentik.io> Signed-off-by: Paco Hope <pacohope@users.noreply.github.com>
Co-authored-by: Dewi Roberts <dewi@goauthentik.io> Signed-off-by: Paco Hope <pacohope@users.noreply.github.com>
Contributor
Author
|
I've accepted all the recommended changes. I saw your comment about how the custom properties might not be necessary. I went to my Zammad provider on my authentik instance and removed them, and I could still login successfully. I created a new user in authentik, signed in with that user in Zammad and it worked successfully. I know it's basically just one person saying "works on my machine" but I think you're right: the customer properties aren't necessary. I made one more change to remove the references to them. |
Co-authored-by: Dominic R <dominic@sdko.org> Signed-off-by: Paco Hope <pacohope@users.noreply.github.com>
Co-authored-by: Dominic R <dominic@sdko.org> Signed-off-by: Paco Hope <pacohope@users.noreply.github.com>
Co-authored-by: Dominic R <dominic@sdko.org> Signed-off-by: Paco Hope <pacohope@users.noreply.github.com>
Co-authored-by: Dominic R <dominic@sdko.org> Signed-off-by: Paco Hope <pacohope@users.noreply.github.com>
Co-authored-by: Dominic R <dominic@sdko.org> Signed-off-by: Paco Hope <pacohope@users.noreply.github.com>
Co-authored-by: Dominic R <dominic@sdko.org> Signed-off-by: Paco Hope <pacohope@users.noreply.github.com>
Contributor
Author
|
I accepted all the changes. Thanks for your help. |
I communicated with Dewi, he is good with the updates.
Collaborator
|
/cherry-pick version-2025.6 |
gcp-cherry-pick-bot bot
pushed a commit
that referenced
this pull request
Jun 3, 2025
* Update Zammad SAML Instructions I just configured Zammad 6.4.1 to work with Authentik 2025.4.1. There seem to have been some changes since these instructions were written. The Name ID Format cannot be left blank. The SSO URL and the logout URL were incorrect. I was getting an Error 422 from Zammad until I turned on signing assertions, so I conclude that is required and I wrote instructions for that. I saw some discussion online elsewhere that the `----BEGIN` and `---END` lines should be removed. I tested it both ways and it worked both ways. I wrote the instructions to keep those lines in because it seemed simplest and most intuitive. Signed-off-by: Paco Hope <pacohope@users.noreply.github.com> * Incorporate separate instructions for certificate file Co-authored-by: Dewi Roberts <dewi@goauthentik.io> Signed-off-by: Paco Hope <pacohope@users.noreply.github.com> * Incorporate simplified copy/paste instructions Co-authored-by: Dewi Roberts <dewi@goauthentik.io> Signed-off-by: Paco Hope <pacohope@users.noreply.github.com> * Incoporate formatting change Co-authored-by: Dewi Roberts <dewi@goauthentik.io> Signed-off-by: Paco Hope <pacohope@users.noreply.github.com> * Incorporate formatting changes Co-authored-by: Dewi Roberts <dewi@goauthentik.io> Signed-off-by: Paco Hope <pacohope@users.noreply.github.com> * Removed reference to custom properties * Capitalisation Co-authored-by: Dominic R <dominic@sdko.org> Signed-off-by: Paco Hope <pacohope@users.noreply.github.com> * Formatting Co-authored-by: Dominic R <dominic@sdko.org> Signed-off-by: Paco Hope <pacohope@users.noreply.github.com> * Formatting Co-authored-by: Dominic R <dominic@sdko.org> Signed-off-by: Paco Hope <pacohope@users.noreply.github.com> * Updated language Co-authored-by: Dominic R <dominic@sdko.org> Signed-off-by: Paco Hope <pacohope@users.noreply.github.com> * Update website/integrations/services/zammad/index.md Co-authored-by: Dominic R <dominic@sdko.org> Signed-off-by: Paco Hope <pacohope@users.noreply.github.com> * Update website/integrations/services/zammad/index.md Co-authored-by: Dominic R <dominic@sdko.org> Signed-off-by: Paco Hope <pacohope@users.noreply.github.com> * tweak to bump build * bump build * use bold font for UI labels * my typo * capitalization fix --------- Signed-off-by: Paco Hope <pacohope@users.noreply.github.com> Co-authored-by: Dewi Roberts <dewi@goauthentik.io> Co-authored-by: Dominic R <dominic@sdko.org> Co-authored-by: Tana M Berry <tana@goauthentik.io>
gergosimonyi
pushed a commit
that referenced
this pull request
Jun 3, 2025
…4774) (#14844) website/integrations: Update Zammad SAML Instructions (#14774) * Update Zammad SAML Instructions I just configured Zammad 6.4.1 to work with Authentik 2025.4.1. There seem to have been some changes since these instructions were written. The Name ID Format cannot be left blank. The SSO URL and the logout URL were incorrect. I was getting an Error 422 from Zammad until I turned on signing assertions, so I conclude that is required and I wrote instructions for that. I saw some discussion online elsewhere that the `----BEGIN` and `---END` lines should be removed. I tested it both ways and it worked both ways. I wrote the instructions to keep those lines in because it seemed simplest and most intuitive. * Incorporate separate instructions for certificate file * Incorporate simplified copy/paste instructions * Incoporate formatting change * Incorporate formatting changes * Removed reference to custom properties * Capitalisation * Formatting * Formatting * Updated language * Update website/integrations/services/zammad/index.md * Update website/integrations/services/zammad/index.md * tweak to bump build * bump build * use bold font for UI labels * my typo * capitalization fix --------- Signed-off-by: Paco Hope <pacohope@users.noreply.github.com> Co-authored-by: Paco Hope <pacohope@users.noreply.github.com> Co-authored-by: Dewi Roberts <dewi@goauthentik.io> Co-authored-by: Dominic R <dominic@sdko.org> Co-authored-by: Tana M Berry <tana@goauthentik.io>
kensternberg-authentik
added a commit
that referenced
this pull request
Jun 6, 2025
* main: (97 commits) website/docs: update style guide (#14373) website/docs: finalize release notes for `2025.6` (#14854) providers/rac: apply ConnectionToken scoped-settings last (#14838) lib/sync: fix static incorrect label of pages (#14851) website/docs: Add FIDO2 references to the documentation (#14826) website/docs: add LDAP docs for forward deletion and `memberUid` (#14814) stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs (#14801) core: bump structlog from 25.3.0 to 25.4.0 (#14834) web: bump tar-fs from 3.0.8 to 3.0.9 in /web (#14836) website/integrations: Update Zammad SAML Instructions (#14774) website/integrations: remove trailing slash from budibase redirect (#14823) remove fluff from release notes 2025.6 (#14819) web: bump @sentry/browser from 9.22.0 to 9.23.0 in /web in the sentry group across 1 directory (#14776) website: bump postcss from 8.5.3 to 8.5.4 in /website (#14787) web: bump the esbuild group across 2 directories with 4 updates (#14711) core: bump github.com/redis/go-redis/v9 from 9.8.0 to 9.9.0 (#14733) core: bump twilio from 9.6.1 to 9.6.2 (#14789) website: bump @types/node from 22.15.21 to 22.15.29 in /website (#14808) core: bump astral-sh/uv from 0.7.8 to 0.7.9 (#14806) core: bump uvicorn[standard] from 0.34.2 to 0.34.3 (#14811) ...
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
5 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Details
I just configured Zammad 6.4.1 to work with Authentik 2025.4.1. There seem to have been some changes since these instructions were written. Zammad does not allow the Name ID Format to be blank. The SSO URL and the logout URL were incorrect. I was getting an Error 422 from Zammad until I turned on signing assertions, so I conclude that is required and I wrote instructions for that. I saw some discussion online elsewhere that the
----BEGINand---ENDlines should be removed. I tested it both ways and it worked both ways. I wrote the instructions to keep those lines in because it seemed simplest and most intuitive.If applicable
make website)