# Zimbra integrate with keycloak

**URL:** <https://forum.keycloak.org/t/zimbra-integrate-with-keycloak/11066>\
**Category:** Configuring the server\
**Created:** [September 20, 2021, 3:34am UTC](https://forum.keycloak.org/t/zimbra-integrate-with-keycloak/11066 "2021-09-20T03:34:05Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![kahfiehudson](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/kahfiehudson/32/3928_2.png) [@kahfiehudson](https://forum.keycloak.org/u/kahfiehudson)\
**Post date:** [September 20, 2021, 3:34am UTC](https://forum.keycloak.org/t/zimbra-integrate-with-keycloak/11066/1 "2021-09-20T03:34:05Z")

</div>

Hi,

Is anyone ever to try keycloak integrate with zimbra?  
If can, do you have the tutorial?

Thank you.

---

<div class="post-metadata">

**Author:** ![xgp](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/xgp/32/2589_2.png) [@xgp](https://forum.keycloak.org/u/xgp)\
**Post date:** [September 20, 2021, 10:10am UTC](https://forum.keycloak.org/t/zimbra-integrate-with-keycloak/11066/2 "2021-09-20T10:10:17Z")

</div>

Which direction? Do you want Keycloak to be an IdP for Zimbra? Or Zimbra to be an IdP for Keycloak?

---

<div class="post-metadata">

**Author:** ![kahfiehudson](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/kahfiehudson/32/3928_2.png) [@kahfiehudson](https://forum.keycloak.org/u/kahfiehudson)\
**Post date:** [September 30, 2021, 4:38am UTC](https://forum.keycloak.org/t/zimbra-integrate-with-keycloak/11066/3 "2021-09-30T04:38:55Z")

</div>

Hi,

I want to keycloack to be an IdP for zimbra. Is that possible? If yes, do you have an article to configure that?

Thank you.

---

<div class="post-metadata">

**Author:** ![xgp](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/xgp/32/2589_2.png) [@xgp](https://forum.keycloak.org/u/xgp)\
**Post date:** [September 30, 2021, 7:26am UTC](https://forum.keycloak.org/t/zimbra-integrate-with-keycloak/11066/4 "2021-09-30T07:26:42Z")

</div>

Here’s a blog post on Zimbra’s support of SAML

> **[Zimbra Single Sign-On using SAML - Zimbra : Blog](https://blog.zimbra.com/2020/02/zimbra-and-single-sign-on-using-saml/)**
>
> Dear Zimbra Friends & Colleagues, Today’s post is from Barry de Graaff, Channel Evangelist at Synacor. He may be a relatively new addition to the Synacor global team, but he has been a vital part of the Zimbra ecosystem for over a decade! Barry...

There’s a guide here on how to set up Zimbra as a SAML SP  
[https://wiki.zimbra.com/wiki/Authentication/SAML#Set\_up\_Zimbra](https://wiki.zimbra.com/wiki/Authentication/SAML#Set_up_Zimbra)

It uses a different IdP, but you can probably figure out the correct params to use from the keycloak admin documentation here:  
[https://www.keycloak.org/docs/latest/server\_admin/#\_saml](https://www.keycloak.org/docs/latest/server_admin/#_saml)

---

<div class="post-metadata">

**Author:** ![kahfiehudson](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/kahfiehudson/32/3928_2.png) [@kahfiehudson](https://forum.keycloak.org/u/kahfiehudson)\
**Post date:** [October 1, 2021, 4:17am UTC](https://forum.keycloak.org/t/zimbra-integrate-with-keycloak/11066/5 "2021-10-01T04:17:59Z")

</div>

Hi,

I’m following the article  
Then I see [https://zm-zimbra9.barrydegraaff.tk](https://zm-zimbra9.barrydegraaff.tk) → this url is my zimbra hostname right?  
Then I see [https://saml.barrydegraaff.tk](https://saml.barrydegraaff.tk) → this url is my keycloak server right?

After that I can’t find this file `/etc/simplesamlphp/cert/server.crt` and this opt/zimbra/extensions-network-extra/saml/samlextn.jar on my zimbra server. Is that must be generate manually?

Thank you.