Assertion url is unable get request_id while logging in to Opensearch Dashboards using SAML

dmallick19 · February 17, 2023, 5:06am

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):
2.5.0

Describe the issue:
request_id is expected in cookie but that is not coming to Opensearch Dashboard when logging in.
I mean assertion url is expecting request_id

Configuration:

This is the codebase

github.com

opensearch-project/security-dashboards-plugin/blob/fe12aaaeb416352fe31bf3fdd7982c3f8de5da83/server/auth/types/saml/routes.ts#L105


      
          async (context, request, response) => {
            let requestId: string = '';
            let nextUrl: string = '/';
            try {
              const cookie = await this.sessionStorageFactory.asScoped(request).get();
              if (cookie) {
                requestId = cookie.saml?.requestId || '';
                nextUrl =
                  cookie.saml?.nextUrl ||
                  `${this.coreSetup.http.basePath.serverBasePath}/app/opensearch-dashboards`;
              }
              if (!requestId) {
                return response.badRequest({
                  body: 'Invalid requestId',
                });
              }
            } catch (error) {
              context.security_plugin.logger.error(`Failed to parse cookie: ${error}`);
              return response.badRequest();
            }

Line# 106

Relevant Logs or Screenshots:

Thank you

pablo · March 3, 2023, 9:17am

@dmallick19 What is your SAML IDP?
Could you share your config.yml?

The code you referred to regards to SAML, so I assume you’re authenticating with SAML. Is that correct?