Hi guys. I’m trying to do login in Kibana using Azure ID and OpenID but the Azure login create a loop. [image] My configs: config.yml authc: basic_internal_auth_domain: http_enabled: true transport_enabled: true order: 0 http_authenticator: type: …

Hi @leo_gazziro Could you try to set in openid_auth_domain the below settings. http_enabled: true (instead of enabled:true) transport_enabled: false Do you see any errors in ES logs? What ODFE version are you running?

When it fails to authenticate it can end up in these kind of loops. I would expect that the problem gets logged in elasticsearch logs. I think when I had an issue like this it was because the elastic nodes did not have a route to my openid servers (and my subject_key was wrong). Also is <tenant> cor…

@pablo I tryed to change http enable and transport config but doesn’t work. My ODFE version 1.13.0.1 About the logs, it doesn’t have relevant informations, I need to active somenting? Thanks for helping guys

@leo_gazziro Try to follow the ODFE documentation and enable either debug or trace logging. Trace will provide more verbose output. Troubleshoot OpenID Connect Documentation for Open Distro, the community-driven, 100% open source distribution of Elasticsearch OSS with advanced securit…

Hi @pablo Sorry for my delay. ES log have this message: [2021-06-01T20:27:45,668][WARN ][c.a.o.s.h.HTTPBasicAuthenticator] [teste-kibana] No ‘Basic Authorization’ header, send 401 and ‘WWW-Authenticate Basic’

Hi @pablo ES log have this message: [2021-06-01T20:27:45,668][WARN ][c.a.o.s.h.HTTPBasicAuthenticator] [teste-kibana] No ‘Basic Authorization’ header, send 401 and ‘WWW-Authenticate Basic’

Hello, we are having the same problem. We are installing Wazuh on docker-compose, which has the opendistro containers. Our oidc provider is keycloack. if anyone knows how to fix it, that would be great, thanks

Azure AD login with OpenID loop

Security

gdd314596 June 7, 2021, 5:25pm 9

Had the same issue. See solution here: Issue with openid/keycloak causing infinite redirects with Helm - #4 by gdd314596

Topic		Replies	Views
OpenID Login Loop (OpenID + AWS Cognito) Security	8	2083	October 1, 2021
Azure sso with openid issue OpenSearch	0	383	July 13, 2022
Opensearch and OpenID (Azure) issue Security	22	3470	November 10, 2023
Azure AD OpenID infinite redirection OpenSearch troubleshoot , configure	0	378	October 20, 2022
OpenID Connect & Basic Authentication on Kibana Security	2	1204	January 4, 2021

Azure AD login with OpenID loop

Related topics