> Authentication object

The following objects are directly related to the authentication API.

Authentication

The authentication object has the following properties.

PropertyTypeDescription
authentication_typeintegerDefault authentication.

Possible values:
0 - (default) Internal;
1 - LDAP.
http_auth_enabledintegerHTTP authentication.

Possible values:
0 - (default) Disabled;
1 - Enabled.
http_login_formintegerDefault login form.

Possible values:
0 - (default) Zabbix login form;
1 - HTTP login form.
http_strip_domainsstringDomain name to remove.
http_case_sensitiveintegerHTTP case sensitive login.

Possible values:
0 - Off;
1 - (default) On.
ldap_auth_enabledintegerLDAP authentication.

Possible values:
0 - (default) Disabled;
1 - Enabled.
ldap_case_sensitiveintegerLDAP case sensitive login.

Possible values:
0 - Off;
1 - (default) On.
ldap_userdirectoryidstringDefault user directory for LDAP authentication. Used for user groups with gui_access set to LDAP or System default.

Property behavior:
- required if ldap_auth_enabled is set to “Enabled”
saml_auth_enabledintegerSAML authentication.

Possible values:
0 - (default) Disabled;
1 - Enabled.
saml_case_sensitiveintegerSAML case sensitive login.

Possible values:
0 - Off;
1 - (default) On.
passwd_min_lengthintegerPassword minimal length requirement.

Valid values range from 1 to 70.

Default: 8.
passwd_check_rulesintegerPassword checking rules.
This is a bitmask field, any combination of possible bitmap values is acceptable.

Possible bitmap values:
0 - check password length;
1 - check if password uses uppercase and lowercase Latin letters;
2 - check if password uses digits;
4 - check if password uses special characters;
8 - (default) check if password is not in the list of commonly used passwords, does not contain derivations of word “Zabbix” or user’s name, last name or username.
ldap_jit_statusintegerStatus of LDAP provisioning.

Possible values:
0 - Disabled for configured LDAP IdPs;
1 - Enabled for configured LDAP IdPs.
saml_jit_statusintegerStatus of SAML provisioning.

Possible values:
0 - Disabled for configured SAML IdPs;
1 - Enabled for configured SAML IdPs.
jit_provision_intervalstringTime interval between JIT provision requests for logged-in user.
Accepts seconds and time unit with suffix with month and year support (3600s,60m,1h,1d,1M,1y). Minimum value: 1h.

Default: 1h.

Available only for LDAP provisioning.
disabled_usrgrpidintegerUser group ID to assign the deprovisioned user to.
The user group must be disabled and cannot be enabled or deleted when configured.

Property behavior:
- required if ldap_jit_status is set to “Enabled for configured LDAP IdPs”, or saml_jit_status is set to “Enabled for configured SAML IdPs”