Join our Discord Server
Follow
Collabnix
Home
AI
Qwen 3 AI Model
Gemma3 AI Model
GPT OSS AI Model
Docs
Resources
Cheatsheets
KubeLabs
DockerLabs
Terraform Labs
Raspberry Pi
Jetson Nano
Jetson AGX Xavier
Community
Events
Chat
Slack
Discord
Write for Us!
OpenWebUI
Building a Secure AI-Powered Zabbix Chat Assistant with OpenWebUI, Claude, and SSO-Based Access Control
AI-powered Zabbix chat assistant for enhanced monitoring Ever wished your monitoring team could just ask Zabbix a question in plain English...
Join our Discord Server
Table of Contents
×
AI-powered Zabbix chat assistant for enhanced monitoring
What We’re Building
Prerequisites
Step 1 — Define Your User Groups and Permissions
Step 2 — Set Up Keycloak as Your SSO Provider
2.1 Create the Keycloak Realm
2.2 Create Groups
2.3 Create Users and Assign Groups
2.4 Create Client for OpenWebUI
2.5 Create Client for Zabbix
Step 3 — Configure Zabbix with Per-Group API Tokens
3.1 Create Zabbix User Groups
3.2 Create API Users and Generate Tokens
3.3 Enable SSO on Zabbix (Optional but Recommended)
Step 4 — Build the RBAC MCP Gateway
4.1 Project Structure
4.2 Permission Matrix
4.3 JWT Authentication Handler
4.4 Main MCP Proxy Server
4.5 Dockerfile
4.6 Requirements
Step 5 — Configure OpenWebUI with SSO and Claude
5.1 OpenWebUI OIDC Configuration
5.2 Connect Claude as the Model Backend
5.3 Connect the RBAC MCP Proxy
Step 6 — Create the OpenWebUI Pipeline for User Context Injection
Step 7 — Docker Compose Putting It All Together
Environment File
Launch
Step 8 — See It in Action
Scenario 1 Alice (Viewer) Tries to Acknowledge an Alert
Scenario 2 Frank (Operator) Acknowledges the Same Alert
Audit Logging
Key Takeaways
What’s Next?
→
Index
