i use kasm with saml login from authentik and it works great. maybe post your config an i can compare it to mine
#Kasm + SAML
young sphinx
young sphinx
in my setup when using saml to login kasm creates saml accounts for them (realm=saml) and does not do any group management. maybe it can be configured to do so but i do not have it set up that way. and i do not know of a way to link a local kasm account to a saml account if that is even possible.
I do see some config differences:
kasm service provider
nameid = emailAddress
default and autologin unchecked
for my kasm identity provider entity id = authentik.domain.tld
x509 cert is authentik self signed
kasm advanced
want attribute statement checked
want name id checked
for my authentik provided config
issuer = authentik.domain.tld
service binding = post
no audience
signing cert is authentik self signed
i have not created any federation or social login so only have authentik built in there.
this is just my what works for me and not necessarily correct (almost certain i have issues)
screen shots (redact as necessary) would probably be helpful fot tshooting more